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Microsoft Plays Price Card 
‘To Grab Virtualization Share 


Technology acquired from Connectix is in line 
to challenge VMware's established market hold 


BY PATRICK THIBODEAU 

In the world of system virtual- 
ization, an intense battle over 
pricing and support 

is brewing between 


Corp. charged for the product 

before Microsoft acquired the 

technology earlier this year 
(QuickLink 36464]. 
The comparable 


| Windows products already af- 


fect VMware users. VMware 


| users say those policies cost 
| them time and convenience. 


The server virtualization 
technology enables users to 
run multiple instances of x86 


operating systems on a single 


| server to increase server uti- 
| lization. Microsoft won’t sup- 
| e . ‘ - 

| port its applications or Win- 


Microsoft Corp. 
and market leader 
VMware Inc. 


VMware product, 
VMware Worksta- 


iF) i . 
tion, costs $299. 
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Rules of 
Storage. 


Federal regulators have discovered data 
storage, big time. New laws are requiring 
companies to save more data and to save it 
longer. Here's your guide to regulatory 


compliance. Stories begin on page 25. 
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Last week, Mi- 
crosoft announced 
that it will release its Virtual 
PC product next month at a 
cost of $129, slashing the price 
from the $229 that Connectix 


Job Agency Hires Foreign Help | 


US. unit of offshore 
company tapped for 
Indiana state project 
BY THOMAS HOFFMAN 
An Indiana state agency char- 
tered to help unemployed resi- 
dents find jobs began a con- 
troversial IT project this 
month with the U.S. sub- 
sidiary of an offshore software 
developer, which plans to 
bring in programmers from 
India to work on the project. 
New York-based Tata Amer- 
ica International Corp. will 
send up to 65 IT staffers from 
India to work alongside 18 
state employees over the next 
two years at a government fa- 
cility in Indianapolis. The 
team will replace a tax and un- 
employment claims process- 
ing system that runs on Unisys 
Corp. mainframes with a 
client/server application writ- 
ten in Java, said Patrick Mur- 
phy, a deputy commissioner at 


www.computerworld.com 


But although 
Microsoft has de- 

layed release of Virtual Server 

until sometime in the first half | 

of next year, the support poli- 
| cies the company sets for 


the Indiana Department of 
Workforce Development. 

The DWD awarded Tata 
a $15.2 million contract last 
summer, and development 
work began Nov. 4. But the 
contract has infuriated some 
state legislators and Indiana 
residents, particularly because 
| of the nature of the work done 
by the DWD. “This is such an 
egregious example, and many 

Job Agency, page 69 


AT&T Wireless 
| Blows Upgrade | 


CRM system snafus | 
put new users on hold 





BY MARC L. SONGINI 
AT&T Wireless Services Inc. 
last week disclosed that it’s 
still trying to recover from 
CRM system glitches that pre- 








vented some customers from 


dows operating systems that 
are running in the VMware 
environment. It requires that 
any problem that arises be 


| replicated on a physical server 


Virtualization, page 16 


Indians in Indiana 


| activating new cell phones or 


changing their calling plans. 
AT&T Wireless spokesman 
Mark Siegel said the problems 
began Nov. 1 following an up- 
grade of the CRM software 
that supports the company’s 
GSM/GPRS network. Siegel 
wouldn’t identify the CRM 
vendor, but two would-be 
users said they were told the 
problems involved Siebel Sys- 
tems Inc.’s applications. 
AT&T Wireless, page 14 
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‘te Canon Color imageRUNNER?® C3200 with 
imageWARE™ Publishing Manager is anything 
but business as usual. Actually, it’s a totally new 
way of working that lets you create and print 
professional-quality color booklets, catalogs, 
brochures...you name it. In-house, right at your 
desktop. With imageWARE Publishing Manager, 


you can combine multiple documents created in Canon's image WARE Publishing Manager Software. 


Create and print color documents right from your desktop. 





different applications to form a single document. 
And we're just scratching the surface. This means 
no more endless waiting for that all-important 
document. See? At long last, you're in control. 
And ultimately, you're not stressing out. The 
Canon Color imageRUNNER C3200 with 
imageWARE Publishing Manager. For fast, 
affordable in-house color with professional-quality 


finishing. So say goodnight to business as usual. 
You can import images or text streams, create 


and format chapters, renumber pages, insert 
www.imagerunner.com 


1-800-OK-CANON 


headers and footers. You can apply editing, 
page imposition, print settings, and professional 
finishing. You can share it all with co-workers. 


You can manage it all every step of the way. 


CanhON knownow: 


Canon and Canon Know How are registered trademarks of Canon inc. IMAGERUNNER is a registered trademark of Canon Inc. in the U.S. and Canada. IMAGEWARE is 
a trademark, and IMAGEANYWARE is a service mark of Canon U.S.A., Inc. ©2003 Canon U.S.A., Inc. Product shown with optional accessories. imageWARE Publishing 
Manager must be purchased separately, and has minimum O/S, hardware and software requirements. Contact your local Canon imageWARE dealer for details 





clutches of desk 


“At last Pm free, thanks to 
Nokia Mobile Connectivity 
solutions...and it feels great, 
exclaims Mary Langer, 

office manager: 
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Introducing a new era of secure, corporate business freedom 
and flexibility — Nokia Mobile Connectivity solutions. 


Employees throughout an enterprise want to be 
more mobile and productive — and this can be 
realized thanks to Nokia Mobile Connectivity solutions. 
Ci0s and IT managers can provide the mobility and 
security of anytime, anywhere access to users — 
while empowering everyone from the CEO to field 
salesforce teams with the information needed to do 
their work where and when they choose. Nokia 
Mobile Connectivity solutions include a range of IPSec- 
and SSL-based client and gateway products that 


CONNECTING PEOPLE 


provide secure, appropriate access to corporate 
email and applications. Enterprises will discover new 
levels of efficiency from their workforce, while 
giving them greater freedom to manage their business 
and personal lives. All solutions are easy to deploy 
and manage, are based on award-winning technology 
and are backed by Global Support and Services. 

So if you want greater working freedom that’s IT 
approved, go ahead and escape. 

Visit www.nokia.com/mobileaccess/americas 
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KNOWLEDGE CENTER 
STORAGE 


The New Rules of Storage 
Laws such as HIPAA and the Sarbanes- 
Oxley Act are forcing IT managers to 
re-examine their storage infrastructures 
to make sure the business complies. 
This special report examines the ramifi- 
cations of regulations that require com- 
panies to store more data, 
and for longer periods of 
time. PACKAGE BEGINS ON PAGE 25. 


28 The Story So Far. David A. Patterson, who led the 
team at the University of California, Berkeley, 
that developed the idea of RAID storage, de- 
scribes the thinking behind the technology. 


32 Regulated Storage. A closer look at two storage- 
intensive regulations, HIPAA and the Sarbanes- 
Oxley Act, and how some organizations are 
adding storage capacity and developing new 
policies to ensure that they’re in compliance. 


38 The Data Life Cycle. IT storage managers are using 
information life-cycle management, a nascent 
concept for managing data from cradle to grave, 

to make sure records-reten- 
tion policies are enforced. 


42 Keeping a Safe Distance. 
Although IP storage can 

be a data and cost saver, 
only a handful of banks and 
brokerages have been reap- 
ing the benefits of long- 
distance IP replication for 
data recovery. 





44 Opinion: Disk capacity is doubling every year; 
prices are dropping. What’s not to like? Plenty, 
says columnist Mark Hall. 


48 Users Build iSCSI 
Momentum. IT man- 
agers at three early 
adopters of iSCSI 
SANs, including 
Adrian Porter (right) 
at 1-800 Contacts, 
talk about their expe- 
riences with the new 
technology and iden- 
tify some problems 
they’ve encountered. 


52 The Almanac: The world’s smallest 4GB hard 
drive and the headaches of storing 5 petabytes of 
biometric data are among the topics covered in 
this eclectic collection of storage news. 


54 QuickStudy: A primer on two storage interfaces, 
serial and parallel. While parallel transmission 
has historically been the preferred way to write 
data to disk, at current speeds, serial transmission 
can be faster and offers other advantages. 


56 Careers: Storage re- 
quirements brought on 
by new legislation are 
forcing some IT man- 
agers, like CareGroup’s 
John Halamka (left), to 
realign and retrain em- 
ployees to handle risk 
management, adhere to 
business rules and en- 
sure privacy. 


58 The Next Chapter: Our group of hae 
industry prognosticators fore- 
sees cell phones packinga -‘ 4 
terabyte of storage and oe. 
extremely remote data 
archiving at a server 
farm on the moon. 
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Seven Tips for Negotiati 
A Sean! Deal. —" 


storage projects are often 
bedeviled by issues that can be 
avoided with proper planning 
early in the game. Robert 
Galletta and Melanie Heintz, 
IT staff directors at the Federal 
Reserve Bank of New York, 
offer these negotiating tips to 


minimize the risks to your 
company. @ QuickLink 42664 


Safe and Legal Data 
Destruction. The area of 
records retention and destruc- 
tion has become something of 
a minefield. IT staffs must use 
all of their resources to nav- 
igate through the mines safely 


and lawfully, write Alan E. 
Brill of Kroll Technology 
Services and Kristin M. 
Nimsger of Kroll Ontrack. 
© QuickLink 35933 


Worst Storage Disasters. 
Readers share their own stories 
about storage projects gone 
wrong. @ QuickLink 42731 
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AT DEADLINE 


Microsoft Targets 
Spam in Exchange 


During his Comdex 2003 keynote 
yesterday, Bill Gates, Microsoft 
Corp.’s chairman and chief soft- 
ware architect, was expected to 
detail plans to add a heuristics- 
based antispam tool to Exchange. 
The tool will analyze patterns of 
content in messages to screen out 
spam, according to information 
obtained by the IDG News Ser- 
vice. Microsoft confirmed that it 
would make a spam-related an- 
nouncement at Comdex. 


Dell Reports Big 
Rise in Results 


Dell Inc. reported a 16% year- 
over-year increase in revenue and 
a 21% jump in net income for its 
third quarter, which ended Oct. 31. 
Dell did $10.6 billion worth of 
business in the quarter and earned 
a profit of $677 million. During a 
conference call, CEO Michael Dell 
said that the IT market has stabi- | 
lized and that the company still 
has “lots of room to grow” in ar- 
eas such as servers and storage. 


Former Gateway 
Execs Face Charges 


The Securities and Exchange 
Commission charged Gateway 
Inc.’s former CEO and two other 
one-time top executives with 
fraud for allegedly cooking the 
company’s books in 2000 to 
meet Wall Street expectations. 
But the SEC said it signed a set- 
tlement deal with Poway, Calif.- 
based Gateway itself. The compa- 
ny agreed to an order prohibiting 
it from any future violations of 
U.S. securities laws. 


Short Takes 


Sources said SUN MICROSYSTEMS 
INC. will announce plans at 
Comdex to build servers based on 
ADVANCED MICRO DEVICES INC.’s 
Opteron processor. Sun declined to 
comment. . . . IBM said it has ac- 
quired Productivity Solutions Inc., 
a Jacksonville, Fla.-based vendor 
of retail self-checkout systems. 





NEWS 


SQL Server Users Focus 


Microsoft plans to 
tighten controls 


with Yukon release 


BY MARC L. SONGINI 
SEATTLE 
N THE AFTERMATH of the 
Slammer worm that 
wreaked havoc with many 
SQL Server users early 
this year, Microsoft Corp. is 
trying to make its database 
software more secure. But 
there’s still room for improve- 
ment, several database admin- 
istrators said last week. 

In response, Microsoft offi- 
cials said at a conference held 
here by user group the Profes- 
sional Association for SQL 
Server that they’re taking steps 
to tighten security in the next 
version of the database, which 
is code-named Yukon and due 
for release in the second half 
of next year. For example, Web 
services capabilities and other 
functionality deemed to be 
nonessential will be turned off 
by default when the software 
is shipped. 

“Security is the most impor- 
tant thing in our business,” 
said Gordon Mangione, vice 
president in charge of SQL 
Server. Microsoft had already 
started to focus more re- 
sources on SQL Server securi- 
ty before Slammer’s outbreak, 
Mangione said, adding that 
users should install the compa- 
ny’s existing Baseline Security 
Analyzer tool to help detect 
system vulnerabilities. 

Townsend Analytics Ltd., a 
Chicago-based financial soft- 
ware vendor that runs SQL 
Server 2000, is beta-testing 
the 64-bit Yukon release. “Pre- 
Yukon, there were things we 
saw that could certainly be im- 
proved,” said Rebecca Lewis, 
director of systems at Towns- 
end. Lewis added that Slam- 
mer “had a large impact on 
us,” requiring Townsend’s IT 
staff to spend a weekend 
working to repair its systems. 

The default shut-off of some 





| features in Yukon is a good 


step, Lewis noted. However, 
she said it would have been 
helpful if Microsoft had offered 
some way to automate the 
process of turning off services 
in SQL Server 2000, which her 
staff has had to do manually. 
Don Watters, data group 
manager at film processor 
PhotoWorks Inc. in Seattle, 
said Microsoft may have to of- 
fer more resources to train 
database managers on how to 
take advantage of the security 
features built into SQL Server. 
“It’s hard to be a security ex- 
pert, developer and database 
administrator,” Watters said. 
Microsoft also has “a long 
way to go” to make it easier to 


| add so-called hot fixes to sys- 


tems running SQL Server 
without taking them off-line, 


On Database’s Security 


said Jose Amado-Blanco, a 
database administrator at Ver- 
izon Communications’ cus- 
tomer support operations in 
Temple Terrace, Fla. 
Microsoft officials said SQL 
Server 2000 can’t support the 
kind of automation sought by 
Lewis. They added that the 
Yukon software will include 
| support for applying hot fixes 
without rebooting systems. 
The security issues facing 
Microsoft and its database 
users aren’t just technical 
ones, said Charlie Garry, an 
analyst at Meta Group Inc. 
Many of the security problems 
involving SQL Server are 
caused by poor database man- 
agement policies or processes 
on the part of IT managers, 
Garry said. But, he added, the 
Best Practices Analyzer con- 








www.computerworld.com 


How Microsoft Is 
Improving SQL 

Server Security 
= All nonessential database 
services will be turned off by 
default in the upcoming Yukon 
release, requiring authorized 
DBAs to activate them. 


=|n some cases, Yukon users 
also will be able to install soft- 
ware patches without rebooting 
their database servers. 


= The company announced a 
new tool that IT managers can 
use to analyze SQL Server 
2000 installations for common 
configuration errors. 


figuration tool announced last 
week for SQL Server 2000 
should help reduce “user cul- 
pability” for database security 
breaches. @ 42841 


MORE NEWS 


Microsoft is redesigning SQL Server's tools 
for moving information between databases: 


QuickLink 42839 
www.computerworld.com 





Microsoft Releases Four Patches 
Under New Monthly Schedule 


BY JAIKUMAR VIJAYAN 
Under its new monthly patch 
release schedule, Microsoft 
Corp. last week announced 
four patches for various flaws 
in its Windows software. 
Three of this month’s patch- 
es are for “critical” vulnerabil- 
ities, while the fourth fixes 


WHAT’S NEW 


Microsoft’s Latest 
Security Updates 


CRITICAL 


MS03-048: Cumulative Security 
Update for Internet Explorer 


MS03-049: Buffer Overrun in 
the Workstation Service 


MS-03-051: Buffer Overrun 
in Microsoft FrontPage Server 
Extensions 


IMPORTANT 


MS02-050: Certificate Valida- 
tion Flaw 


an “important” flaw. 

Users are still trying to ad- 
just to the new schedule. 

The monthly cycle makes 
patching easier and more pre- 
dictable from an administra- 
tive standpoint, said Mike Tin- 
dor, vice president of network 
operations at First USA Inc., 
an Internet service provider in 
St. Clairsville, Ohio. “I can def- 
initely see where this is more 
beneficial,” particularly for 
large companies, he said. 

But the whole scheme can 
fail if attackers are able to dis- 
cover and exploit vulnerabili- 
ties during the interim be- 
tween Microsoft’s monthly 
patch releases, Tindor said. “It 
all boils down to whether I 
trust that a vulnerability that 
Microsoft knows about, but 
for which they do not release 
a patch for weeks, will remain 
undisclosed,” he said. 

But according to Microsoft, 
that concern is misplaced. 








“If there’s a major threat 
facing customers, Microsoft 
will definitely release a patch 
as soon as possible” rather 
than wait for the monthly re- 
lease, a company spokesman 
said. He said that fact is men- 
tioned in the announcement 
and in white papers detailing 
the monthly patch program. 

The critical patches re- 
leased last week included one 
for fixing five newly discov- 
ered vulnerabilities in Micro- 
soft’s Internet Explorer Web 
browser. The flaws could al- 
low attackers to carry out a 
variety of malicious actions 
such as taking administrative 
control of a victim’s system, 
reading files stored on hard 
disks and downloading mali- 
cious code. The cumulative 
patch also includes functions 
for fixing all previously an- 
nounced flaws in Internet Ex- 
plorer 5.01 and 5.5, according 
to Microsoft. @42835 





www.computerworld.com 


NEWS 


Legislation to Alter Federal 
IT Services Procurement 


Shift to performance-based contracts 
would increase flexibility for vendors 


BY DAN VERTON 
WASHINGTON 

The Senate last week passed a 
bill that’s poised to signifi- 
cantly alter the way federal 
agencies procure IT services. 

The Defense Authorization 
bill includes the Services Ac- 
quisition Reform Act, also 
known as SARA. Introduced 
earlier this year by Rep. Tom 
Davis (R-Va.), SARA would 
move the government away 
from costly “time and materi- 
als” contracts. The bill is now 
being prepared for President 
Bush to sign. 

A key section of the SARA 
provisions offers incentives for 
agencies to use performance- 
based contracts, a shift that an- 
alysts and industry executives 
said will force IT product and 
services vendors to change the 





| way they do business with the 


federal government. 

Most IT service providers 
will likely benefit from the 
legislation because it will give 
them flexibility to choose the 
best commercial technologies 
to use under a contract, rather 
than having to build custom 
products to meet government 
specifications, said Jim 
Howard, CEO of CrownPeak 
Technology, a Los Angeles- 
based Web content manage- 
ment service provider that 
counts many agencies among 
its customers. 

The legislation would also 
benefit the government by en- 
suring that money isn’t spent 
on products and services that 


| aren’t doing what it needs 


them to do, he said. 
“With the [performance- 


based] software service 


model, in which you pay for 


| what you use, the vendor is 
| taking the chance that the 


software will work well for 
the customer, as opposed to 


| the government paying a lot 


of money to make it work and 
then betting that the entire 


| enterprise will use it,” How- 
| ard said. 


Risky Business 


| SARA is also likely to have a 
| significant impact on systems 


integrators that do custom 


| work on an hourly basis, 


Howard said. 
Some large systems inte- 


| grators have historically shied 
| away from performance-based 


contracts, which they consid- 
er a risky approach to busi- 
ness, said Mike Barbee, presi- 


| dent and general manager of 


WamNet Government Ser- 


| vices Inc., a Herndon, Va.- 


based company that’s helping 


ClOs Detail IT Cost-Cutting Moves 


‘Tech chiefs lower expenses through small 


steps, overhauls; some face resistance 





BY LUCAS MEARIAN 
COLUMBUS, OHIO 

Sam Coursen, CIO at NCR 
Corp., last week said he has 
saved more than $20 million in 
IT expenses over the past year 
or so by eliminating what 
many of the company’s end 
users previously considered 
fixed-cost items. 

For example, scrutinizing 
who gets company-funded 
mobile devices such as cell 
phones, handhelds and laptop 
computers as opposed to 
desktop PCs has saved NCR 
millions of dollars, he said. 

Coursen was among more 
than 150 CIOs who attended a 
symposium here that focused 
on guiding IT departments 
through turbulent economic 
times. The conference was 
hosted by the Columbus [ech- 





nology Council and the Center 


for Information Technologies 
in Management at Ohio State 


| University. 


Dayton, Ohio-based NCR 
was spending 
$7 million per year 
on voice confer- 
encing alone, an 
expense that 
Coursen said he 
was able to cut 
dramatically by 
looking at how the 
technology was 
being used 
whom. 

But limiting the use of new 
technology by end users isn’t 
the only way NCR is reducing 
its IT costs. Coursen said the 
technology vendor is rolling 
out a global ERP system and 
has migrated to a shared-ser- 


| 


| 
| 
| 
| 


We don’t 

do any 
projects any- 
more that don’t 
have a one- 
year payback. 


vices model for IT as part of 
the project, producing about 
$100 million in annual savings. 


“We don’t do any projects any- | 
| honest broker between depart- 
ments,” he said. 


more that don’t have a one- 
year payback,” he noted. 

Not everyone is finding it so 
easy to take the kind of steps 
cited by Coursen. During a 
panel discussion, 
Brad Dunning- 
ton, senior vice 
president of 
strategy at Ed- 
wards Industries 
Inc. in Colum- 
bus, said he has 
had a hard time 
setting up shared 
IT services 
across a decen- 


and by sam COURSEN, ClO, NCR 


| tralized group of operating 
| companies whose managers 


tend to fight over how the ser- 
vices are allocated to their in- 
dividual departments. 

Mike Curtin, president and 
CEO of The Dispatch Compa- 
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| to build the U.S. Navy’s $6.9 
| billion intranet. 


“The big systems integrators 


are relatively inexperienced at 


this and are risk-averse. So 
there’s a question if they will 


| embrace this,” he said. 


On the government side, 


| performance-based contract- 
| ing “really requires a lot of up- 


| front planning on service-level 
| agreements by the agencies 

| involved,” said Barbee. “And 

| some agencies view the re- 


GENERAL 








ty Sek SSS SF 


nies Inc., which owns The 
Columbus Dispatch newspaper, 
said he counts on his IT de- 
partment to determine which 
projects are most valuable to 
the company as a whole. “We 
rely on the IT team to be the 


Buy or Lease? 
Ohio’s state government has 
saved more than $15 million in 


annual costs by switching 


from buying software to leas- 
ing the technology and then 
renegotiating its contracts 
with several key vendors, said 


| Greg Jackson, the state’s CIO. 


For example, Microsoft 


| Corp. cut $12 million from its 


software contract with the 
state, Jackson said. He added 
that BMC Software Inc. re- 
duced its contract by $2.5 mil- 


| lion and Cognos Inc. dropped 


$3.4 million from the cost of 
its deal. 

“We also examined utiliza- 
tion of data center space and 
found 20% of it was being 


Percentage 
Contracts Considered 


quirement to define the end 
state as risky. They will ask 
themselves, What if we’re 
wrong?” 

But all agreed that perfor- 
mance-based contracting will 
have clear benefits for the 
government. 

“They pay for what they 
get,” said Barbee. “With time 
and materials contracts, the 


| bill comes in every month, re- 
| gardless of what was accom- 


| plished.” © 42832 


of 


used for office space,” Jackson 
said, noting that he asked the 
workers to vacate the premis- 


| es and find more appropriate 


office locations. 
Savings aside, Jackson said 
one of the most difficult issues 


he has faced is convincing his 
| superiors that spending mon- 
| ey onIT in hard economic 


times can save money in the 
long run. Building a reputation 
of successfully managing proj- 
ects is the best way to win 
their confidence, he said. 
However, Jackson said some 
newly hired IT executives 
have the advantage of lacking 
a track record that includes 
any failed systems work for 
their new bosses. “Your first 
six months as CIO, you’re on 
your honeymoon,” he said. 
“That's the time to obtain re- 


sults.” @ 42844 


TOUGH TALK 


The DHS's Steve Cooper says he’s pushing 
Microsoft to improve software security 


QuickLink 42809 
www.computerworld.com 
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Cisco to Acquire 
Conferencing Tools 


Cisco Systems Inc. said it will pay 
about $80 million to buy Latitude 
Communications Inc., a vendor of 
video- and audio-conferencing 
software and Web-based collabo- 
ration tools in Santa Clara, Calif. 
The deal is expected to be com- 
pleted by the end of January. Lat- 
itude, which has about 180 em- 
ployees, will become part of Cis- 
co’s voice technology group. 


SAP Ends User 
Show in Europe 


SAP AG said it’s discontinuing the 
European version of its Sapphire 
user conference and will replace 
it with a series of meetings in dif- 
ferent countries. The software 
vendor added that Sapphire will 
continue to be held in the U.S. 
and will be recast as an event for 
users from around the world. The 
next conference is due to take 
place in May in New Orleans. 


IBM Upgrades 
Mobile Database 


IBM announced an upgrade of its 
DB2 Everyplace mobile database 
that supports handheld devices 
and automated synchronization of 
data with corporate systems. IBM 
also said it’s bundling its J9 Java 
virtual machine code with the 
Version 8 release and adding in- 
terfaces to Microsoft Corp.’s .Net 
development technology. Pricing 
for the enterprise edition starts at 
$15,000 per CPU. 


Short Takes 


NOVELL INC. released an upgrade 
of its Red Carpet systems man- 
agement tools for Linux servers 
and desktop PCs. . . . The U.S. 
PATENT AND TRADEMARK OFFICE 
said it’s re-examining a Web 
browser plug-in patent that a 
federal court jury in August ruled 
MICROSOFT had infringed upon. 
The ruling triggered a plan by 
Microsoft to modify Internet Ex- 
plorer [QuickLink 41926]. 


NEWS 


MARK HALL ®ON THE MARK 


Economic Woes Gave 
Java a Breather as... 


... companies kept .Net at arm’s length, hesitating to invest in Micro- 
soft Corp.’s new development framework. Java proponents were able to 
hold their ground during the long downturn because it would have been 
too expensive for users to shift to a new development environment, 
whatever its advantages might be. Tim Kinslow, practice manager for 
Web-based solutions at Trigent Software Inc. in Natick, Mass., says 
even most IT shops with Microsoft technology investments “pushed 
and tweaked” Active Server Pages as far as they could instead of jump- 


ing on the .Net bandwagon. That’s chang- 
ing quickly. “We've had more interest 
among our clients in .Net in the past four 
months than in the past two years,” Kins- 
low claims. “Now people are talking 
about legacy migrations to .Net.” By no 
means does Kinslow argue that Java will 
disappear. The point, he says, is that the 
two environments will increasingly have 
to work together. The issue for IT man- 
agers is to determine where their organi- 
zations’ strengths lie. That 
means people. “Where are 
the hearts and minds of 
your developers?” Kinslow 
asks. Do you have cubicles 
crowded with Java junkies 
or Visual Basic users? Either 
way, you'll need to insist 
that they write applica- 
tions with Web services 
connections to the outside 
world. “The programmers 
will still hate each other,” he 
says, “but at least the data 
will be compatible.” When 
pushed for a conclusion 
about which approach has 
the long-term advantage, 
Kinslow reluctantly gives 


Pi Ren eel 


Drug companies claiming 
that high development 
costs are the reason why 
the same drug costs more 
here than in Canada will 
have a weaker argument 


Inc. in Scottsdale, Ariz., 
ater eie ORO DEEL) 
Lifecycle Management soft- 
ware this week. The prod- 
uct automates the costly 
COCHIE Ue Rem lelan lad 
among research, clinical 
trial and approval bodies. 


| the nod to .Net. “It comes down to lan- 


guages,” he says. “I’m a programmer at 
heart, and .Net supports a variety of lan- 
guages. Java is just Java.” = Web services 
will be the primary reason to jump to ATG 6.2, 
being released in mid-December by Art 
Technology Group Inc. in Cambridge, 
Mass. According to CTO Fumi Matsumo- 
to, users of previous releases of the CRM 
and portal software needed to write cus- 
tom code to link to other applications. 
With the impending re- 
lease, developers need 
only write standard SOAP 
wrappers loaded with 
XML data to communi- 
cate with other environ- 
ments. ® Stu Sjouwerman, 
founder and chief operat- 
ing officer of Clearwater, 
Fla.-based Sunbelt Soft- 
ware Inc., boasts that 
revenue from his aptly 
and succinctly named anti- 
spam product, iHateSpam, 
jumped from $600,000 

in 2002 to better than 

$2 million so far this year. 
But he thinks sysadmins 
need an even more com- 
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prehensive mail tool to alleviate their 
e-mail miseries. That’s why his develop- 
ers are working on a messaging manage- 
ment system code-named Messaging 
Ninja. It will not only fight spam, but also 
handle content filtering and include ap- 
propriate disclaimers to messages for 
legal reasons. Expect a first-quarter 2004 
delivery. ® Although PowerPoint presenta- 
tions may not be spam, they do seem as 
ubiquitous. And you can expect to see 
even more of them when Plus Vision 
Corporation of America releases its V3- 
131 projector next month. At 2.2 Ibs. and 
smaller than most books on your shelf, 
the projector will be a hit with mobile 
sales forces and may become anew 
headache for you to manage. Mark Hand, 


| marketing vice president at the Beaver- 
| ton, Ore.-based company, says he increas- 


ingly needs IT shops to sign off on these 
devices because IT ultimately will sup- 
port those end users. Plus, V3-131 is capa- 
ble of connecting to 802.11 wireless net- 
works and displaying output from any 

PC on the network, adding to IT’s inter- 
est in the projector. But at least they typi- 
cally hit the sales and marketing budget 
rather than yours. The XGA version costs 
$2,000 and the SVGA $1,500, somewhat 
more than those laptops that did hit your 
budget. # Business process management 
software can work great on the road if 
you've got a laptop and a connection. 

But if you’ve got access only to a cell phone 

or PDA, you've been out of the loop. No more. 
Starting the first week of December, 
CommerceQuest Inc. in Tampa, Fla., 
ships Traxion Mobile, a module for its 
Traxion Business Process Management 
System. Traxion Mobile lets users of 
Java-enabled cell phones, Palm hand- 
helds and other mobile devices complete 
tasks and get new assignments and up- 
dates while in taxis, at construction sites, 
walking down Fifth Avenue and virtually 
anywhere else. With prices starting at 
$50, you can easily afford to stay in the 
loop. @ 42811 





Macromedia Woos Corporate Developers 


J2EE-based application serv- 
ers, including his company’s 





BY CAROL SLIWA 
Macromedia Inc.’s Flash tech- 
nology has been popular with 
developers who create animat- 
ed Web pages, but the San 
Francisco-based company will 
try to extend its reach by giv- 
ing corporate programmers a 
new way to build rich clients 
for transactional Internet- 
based applications. 

Today, Macromedia plans to 
release a beta version of Flex, 
a server software product and 


application framework that 
can be used with the tools and 
infrastructure corporate de- 
velopers are already using. 

Joshua Duhl, an analyst at 
IDC in Framingham, Mass., 
said corporate developers 
have been reluctant to use 
Flash because of its different 
programming paradigm. 

But Macromedia has creat- 
ed anew XML-based lan- 
guage, called Flex Markup 
Language, that a developer 








can use to describe the user 
interface of an application. 


| The Flex application frame- 


work provides prebuilt code 
and runtime services for data 
connectivity, and the Flex 
server compiles the code into 
a file that is sent to the brows- 
er, where it’s rendered by 
Macromedia’s Flash Player. 
Rod Hodgman, vice presi- 
dent of product management 
at Macromedia, said the initial 
Flex release will run on top of 





JRun, IBM’s WebSphere, BEA 
Systems Inc.’s WebLogic and 
the Apache Software Founda- 
tion’s open-source Tomcat. 
Flex is due in the first half of 
next year. A .Net version will 
follow, Hodgman added. 
Macromedia also plans a 
tool, based on its Dream- 
weaver MX 2004, to provide 
visual layout and integrated 
development and debugging 
for Flex applications. A beta is 
due next month. @ 42843 
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Users of Online Job Services 
Risk Lack of Privacy Protection 


Yearlong study reveals sales of personal 


information, profiling of job seekers 





BY JAIKUMAR VIJAYAN 
OB SEEKERS who go to on- 
line sites to look for em- 
ployment run a consider- 
able risk of having their 
personal information im- 

properly sold, shared or used 

for profiling purposes. 

That’s the finding of a year- 
long study on the privacy 
practices of job-related Web 
sites that was released last 
week by The World Privacy 
Forum, a privacy rights orga- 
nization in San Diego. 

The study of more than 70 
online job sites, employment 
kiosks, résumé databases and 
résumé distribution services 
has revealed problems such 
as the sharing and sale of 
job-seeker data and undis- 
closed tracking and profiling 
of users, according to primary 
researcher Pam Dixon. 

“We really need a whole 
new way of talking with job 
seekers about how they can 


look for jobs and not get [their | 


personal information] tracked, 
diced and sliced in multiple 
ways,” Dixon said. 


Too Much information 
A tendency to collect too 
much information, a lack of 


consistency in handling ethnic | 


and racial data, overuse of 
cookies, and frequent sharing 
of data with third parties and 
advertisers were other prob- 
lems identified in the survey. 

Companies that allow po- 
tential hires to file job appli- 
cations online aren’t faultless 
either, Dixon said. Often they 
fail to mention that their sites 
are outsourced to third par- 
ties that may have privacy 
policies that are different 
from their own. 

The rapid proliferation of 
employment application job 
kiosks inside shopping malls 
and retail stores also presents 
a problem because few of 


them post any privacy policies 
when collecting confidential 
information, Dixon said. 

One example highlighted in 
the study was Portland, Ore.- 
based Unicru Inc., which is 
the largest operator of these 
kiosks. Unicru’s clients in- 
clude Woonsocket, R.I.-based 
pharmacy chain CVS Corp. 

A Unicru spokeswoman 
said the company’s practices 
meet legal guidelines. 

In some cases, information 


Cisco Targets SSL VPN Vendors, Adds 
Support for Clientless Security Protocol 


Installed base of 
VPN devices may 


| give it an edge, 


despite late entry 
BY MATT HAMBLEN 
Cisco Systems Inc. last week 
said it will add support for the 
Secure Sockets Layer protocol 
to its virtual private network 
hardware, elbowing its way 
into a market now occupied 
by many smaller vendors — 
some of which began shipping 
SSL VPN technolo- 
gy two years ago. 
But Cisco’s en- 
try, though late, 
should be wel- 
comed by the net- 
working vendor’s 
installed base, according 
to several analysts. Their pre- 
dictions were seconded by 
Stephen Smith, network 
manager at Keystone Mercy 
Health Plan in Philadelphia. 
“T’ve been waiting for this 
with great anticipation,” Smith 
said. Mercy Health, a Medic- 
aid managed care company, 
currently uses a Cisco VPN 
3030 device that supports the 


| 





| 
| 
| 
| 
| 


that was collected for one pur- 
pose was being used for other 
purposes, the study said. 


Passing It on 
FastWeb.com, a scholarship 
search service owned by May- 
nard, Mass.-based Monster 
Inc., collected information on 
ethnicity, nationality and reli- 
gion from students for schol- 
arship purposes but then 
shared the information with 
employers looking to diversify 
their workforces. 

A spokesman for FastWeb 
said that in all instances in 


| which such information was 


| 
| 
| 
| 
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IPsec security protocol to pro- 
vide secure transport capabili- 
ties to about 200 end users 
who work from home. 

But Smith noted that the 
SSL VPN technology is client- 
less and should be able to 
work with some Web applica- 
tions that don’t function well 
with IPsec. “We’ve had prob- 
lems with IPsec, and we’ve 
needed clientless [capabil- 
ities],” he said. 

Cisco’s new offering, called 
WebVPN, will also let Mercy 
Health use its existing VPN 
— 3030 appliance to 
provide both IPsec 
and SSL VPN func- 
tionality. “I don’t 
want [to add] an- 
other platform, and 
with this approach, 
I won't have to,” Smith said. 

Cisco officials said Web- 
VPN will be built into new 
concentrators starting in Janu- 
ary and will be made available 
at no extra cost to current 
users (see box). 

There are “millions” of Cis- 
co’s VPN 3000 Series Concen- 
trators in use, which will give 
the company a big advantage 
over other SSL VPN vendors, 








passed on to an employer, it 
was done only with the full 
consent of the students. 
Another example cited in 
the report was Cambridge, 
Mass.-based Eliyon Technolo- 
gies Inc., which maintains pro- 
files of over 16 million individ- 
uals from over | million com- 
panies. The profiles are used 
by 25 of the Fortune 100 firms 
in their recruitment processes. 
But Eliyon doesn’t have a 
formal privacy policy, offer 
an opt-out policy or give indi- 


| viduals a chance to correct the 


information in its database, 
Dixon said. 


said Joel Conover, an analyst 
at Current Analysis Inc. in 
Sterling, Va. “Cisco’s entry will 
have a profound impact on the 


| SSL VPN market,” he predict- 


ed. “It changes the competi- 
tive nature of the market.” 


Limitations 

Conover said the first release 
of WebVPN has weaknesses, 
including an inability to sup- 
port Web portals based on Cit- 
rix Systems Inc.’s software. 
Some of the shortcomings are 
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= Lack of consistent policies 
relating to the collection and 
use of ethnic and racial 
information about job 
applicants. 


= More persistent use of third- 
party cookies. 


= Increased sophistication 
in finding legal ways of 
ET Me) eeectcs)Ccimerle mdi a) 
Chica y-lat ioe 


OURCE: THE WORLD PRIVACY FORUM 


Jonathan Stern, CEO of Eliy- 
on, dismissed the concerns 
and said the information in 
the company’s databases is 
compiled from publicly avail- 


able records. @ 42837 


due to the fact that the VPN 
3000 line is three years old. 

For example, the devices 
can’t handle more than 200 
concurrent end users, Conover 
said, which could be a draw- 
back for IT managers who 
need to support thousands of 
users and don’t want to stack 
numerous concentrators. 

But Conover added that he 
expects Cisco to make the 
necessary improvements 
quickly and eventually domi- 
nate SSL VPNs as it does so 
many other parts of the net- 
working market. 

Having IPsec and SSL VPN 
functionality in a single box 
will help Cisco because many 
companies need to use both 
technologies, said Zeus Ker- 
ravala, an analyst at The Yan- 
kee Group in Boston. 

For many smaller vendors 
of SSL VPNs, Cisco’s entry 
into the market with a free of- 
fering “means their future is 
pretty limited,” he said. 

Kerravala added that in an 
October survey of 248 large 
and midsize companies, about 
95% said they would consider 
buying SSL VPN technology 
from Cisco. That was far more 
than any of Cisco’s rivals 
scored on the survey, which 
was funded by a group of ven- 
dors that Kerravala wouldn’t 
identify. @ 42806 





Poors 


PRIMEPOWER servers. 
Designed for the business that never stops. 


, Outstanding availability and highly rated service and 
c support mean your business will be up and running. 
These days, availability, performance, and reliability are 
everything. As you look to improve enterprise uptime and 
increase service levels, you need to demonstrate 
measurable short-term return on investment. Enter the Fujitsu 
PRIMEPOWER™ line of Solaris™-compatible servers. From single 
CPU, rack-mounted servers to enterprise-ready systems that scale 
to 128 CPUs in data center applications, we’ve got you covered. 
With superb reliability, industry-leading performance, and service 
that wins customer praise, PRIMEPOWER servers can dramatically 
boost the efficiency of your business. See why so many successful 
companies trust their businesses to the infinite power of Fujitsu. Get 
your copy of our FREE white paper, Experiences of Enterprise 
Customers, at www.computers.us.fujitsu.com/ad/primepower or 
call (877) 905-3644. 


a 
FUJITSU 


THE POSSIBILITIES ARE INFINITE 


©2003 Fujitsu Computer Systems Corporation. Fujitsu and the Fujitsu logo are registered trademarks of Fujitsu Limited. PRIMEPOWER is a trademark or registered trademark of Fujitsu Computer Systems Corporation 
in the United States and other countries. Solaris is a trademark or registered trademark of Sun Microsystems, Inc. in the United States and other countries. For more information on PRIMEPOWER servers’ performance. 
visit www. ftsi. fujitsu.com/services/products/primepower/performance.htmi#benchmarks 





12 comPUTERWORLD November 17, 2003 


Storage Standard 
Gets Fast Review 


The Storage Networking Industry 
Association (SNIA) said its pro- 
posed storage management inter- 
face standard is being put on a 
fast-track review by the Interna- 
tional Committee for IT Standards 
in Washington. The San Francis- 
co-based SNIA said it hopes that 
the process will result in the Stor- 
age Management Initiative Speci- 
fication being approved as an offi- 
cial ANSI standard by mid-2004. 


Onyx Seeks to Buy 
CRM Rival Pivotal 


Bellevue, Wash.-based Onyx Soft- 
ware Corp. announced an unso- 
licited bid to snatch CRM rival 
Pivotal Corp. from the arms of a 
third vendor. Pivotal last month 
agreed to a $47 million cash buy- 
out by an investment firm that 
wants to combine it with Talisma 
Corp. But Onyx said its stock- 
swap offer is worth $59 million at 
current prices. Vancouver, British 
Columbia-based Pivotal said it 
will review the proposal. 


Mobile Phones 
Hurt PDA Market 


Worldwide shipments of handheld 
devices continued to decline in the 
third quarter, partly as a result of 
competition from mobile phones 
with similar functions, according 
to Gartner Inc. Gartner said global 
handheld shipments slipped 0.2% 
to 2.52 million units, resulting in 
the eighth consecutive quarter of 
year-over-year declines. 


Short Takes 


ADOBE SYSTEMS INC. said it has 
acquired the technology assets of 
Yellow Dragon Software Corp. in 
Vancouver, British Columbia, to 
bolster XML support in its docu- 
ment management products. . . . 
VITRIA TECHNOLOGY INC. in Sun- 
nyvale, Calif., this week will an- 
nounce an upgrade of its Busi- 
nessWare application integration 
software. 





NEWS 


Private Sector Key 
‘To Cybercrime Fight 


Secret Service raises level of awareness 





BY DAN VERTON 
STANFORD, CALIF 
EDERAL LAW enforce- 
ment officials’ battle 
against organized cy- 
bercrime is beginning 
to make some progress. But 
more cooperation is needed 
from the private-sector com- 
panies that are the targets of 
these criminal groups. 

That’s the conclusion of 
officials who took part in this 
month’s IT Preparedness Ex- 
ercise here, sponsored by the 
USS. Secret Service. Computer- 
world was granted exclusive 
access to the exercise under 
an agreement that the content 
and results of the scenarios 
used not be disclosed. 


Top Execs Involved 

The exercise, held Nov. 5-6 on 
the campus of Stanford Uni- 
versity, included more than 
180 senior-level executives 
from the private sector. It was 
the third in a series of Secret 





’ It’s not a reac- 
~ & tive model. 
It’s ‘Get your butt 
out from behind the 
desk and go help.’ 


ROBERT WEAVER, DEPUTY SPECIAL 
AGENT, NEW YORK ELECTRONIC 
CRIMES TASK FORCE 


Service IT Preparedness Exer- 
cises mandated by the Depart- 
ment of Homeland Security. 
The Secret Service is now a 
DHS agency. 

Although detailed results of 
the exercise can’t be disclosed, 
the bulk of the corporate rep- 
resentatives present indicated 
that they lacked knowledge 
about the various private-sec- 
tor Information Sharing and 
Analysis Centers. Many were 
either unfamiliar with the role 
of ISACs or unaware of their 
existence altogether. 

Enough questions were 





raised on the first day that the 
exercise planners added an 
impromptu presentation by a 
senior representative of the Fi- 
nancial Services Sector ISAC 
on what ISACs are and what 
they do. 

This lack of awareness, 
which has been evident at oth- 
er conferences attended by 
other industry groups [Quick- 
Link 42157], is one of the pri- 
mary reasons the Secret Ser- 
vice holds the exercises, offi- 
cials at the event said. 


Communication Essential 
“The primary mechanism that 
needs to be in place is a strong 
and robust relationship and 
communication between the 
private sector and the govern- 
ment, such as that provided by 
the ISACs,” said John Frazzini, 
vice president for intelligence 
operations at Reston, Va.- 
based security firm iDefense 
Inc., and a former agent and 
founding member of the elec- 
tronic crimes division at the 
Secret Service. “Without that,” 
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Frazzini explained, “it will be 
a hodgepodge approach that 
will not be very effective. This 
is an opportunity for corpo- 
rate executives to get involved 
and contribute.” 

Frazzini also contributed to 
an October World Bank re- 
port, “Electronic Safety and 
Soundness: Securing Finance 
in a New Age,” which con- 
cludes that the lack of accu- 
rate and timely reporting of 
cybercrime incidents is ham- 
pering the overall battle 
against cybercrime. 

“The private sector will 
need to make unprecedented 
efforts to cooperate with law 
enforcement agencies and 
with supervisory authorities 
within and across borders due 
to the very global nature of 
the Internet technology back- 
bone,” the World Bank report 
states. 

Robert Weaver, deputy spe- 
cial agent in charge of the Se- 
cret Service’s New York Elec- 
tronic Crimes Task Force, said 
companies in critical-infra- 
structure sectors don’t have to 
experience a loss or want to 
prosecute to ask the Secret 
Service for assistance. “It’s not 
a reactive model,” he said. 
“It’s ‘Get your butt out from 
behind the desk and go help.’” 
@ 42833 





CSOs Join Forces Against Cyberthreats 


Former White 
House adviser 


to lead group 


BY JAIKUMAR VIJAYAN 
Information security execu- 
tives from such high-profile 
companies as eBay Inc., Bank 
of America Corp., Microsoft 
Corp. and Oracle Corp. last 
week announced the creation 
of a Global Council of Chief 
Security Officers to collabo- 


| rate in defending against cy- 


berthreats. 

The effort, spearheaded by 
Howard Schmidt, former 
White House cybersecurity 
adviser and currently CSO at 
eBay, will focus on enabling 
better communications on se- 
curity issues between the pri- 





vate and public sectors. 

Details about how the group 
will do that will become avail- 
able after its first formal meet- 
ing in January. 

“We plan to use the collec- 
tive expertise of all the mem- 
bers of the council to really 
continue the momentum we 
have seen over the last couple 
of years” around cybersecuri- 
ty, Schmidt said at a press con- 
ference last week. “We are 
bringing together selective ex- 
pertise from the private sector, 
academia and the government 
to continue the dialogue and 
to make sure that [cybersecu- 
rity] remains a Tier 1 issue.” 

One goal of the effort is to 
build a greater leadership role 
for the private-sector compa- 
nies that own and operate 





much of the critical infrastruc- 
ture, said Mary Ann Davidson, 
CSO at Oracle. 

“Since government doesn’t 
own cyberspace, it is impor- 
tant that the security kahunas 
of private industry work to- 
gether to help implement and 
support it,” she said. “It can’t 
just be the government saying, 
‘This is what you shall do.’ In- 
dustry has the responsibility 
to step up to the plate.” 


Lofty Stature 


The stature of the individuals 
within the council will ensure 
that industry concerns are 
well represented to the gov- 
ernment, said John Pescatore, 
an analyst at Gartner Inc. 
“Getting working CSOs 
from big companies together 





Raison d’étre 
The council's objectives 
include the following: 

Bringing together CSOs to 
Defining a formal role for 
Determining the appropriate 


is really important because 
there is a lot of knee-jerk ‘we 
need legislation’ type talk 
floating around” government 
circles, Pescatore said. “These 
are very senior people who 
have a lot of others listening 
to them.” @ 42819 
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Oracle Seeks Speedier Ruling 
In PeopleSoft Poison-Pill Suit 


Asks court to 
block refund offer | 
BY MARC L. SONGINI 
RACLE Corp. last 
week took action in 
an attempt to keep 
itself from gagging 
on one of the poison pills that 
business applications rival 
PeopleSoft Inc. is trying to use 
to block Oracle’s $7.3 billion 
hostile takeover bid. 

Oracle asked a judge at the 
Delaware Chancery Court for 
an expedited ruling on its suit 
to block PeopleSoft’s anti- 
takeover provisions. In partic- 
ular, Oracle pointed to a pro- 
gram under which PeopleSoft 
has promised new or upgrad- 
ing users payments of up to 
five times the cost of their li- 
censes if the company is 
bought out within two years 
and support for its software is 
ended within four years. 





Pleasanton, Calif.-based 
PeopleSoft has said that the 
so-called customer assurance 
program has already created a 
potential financial liability of 
about $800 million for an ac- 
quiring company. In last week’s 
court filing, Oracle argued that 
the refund offer could make 
the cost of buying PeopleSoft 
“prohibitive” for it and any 
other would-be suitors. 

“It helps the customer but 
makes any potential acquirer 
have a huge liability,” Chuck 
Phillips, an executive vice 
president at Oracle, said in an 
interview. “It’s making [Peo- 
pleSoft] worthless and taking 
control from the shareholders.” 

Phillips, Oracle’s point man 
on the takeover attempt, 
added that a decision this 
month by PeopleSoft officials 
to expand the scope and time 
frames of the customer assur- 
ance program was “a very 
dangerous” move legally. 


“They’re out of 
step with the 
current environ- 
ment of corporate 
governance,” he 
contended. 

“Contrary to Or- 
acle’s assertion, 
PeopleSoft’s man- 
agement is acting 
in the best interest 
of the sharehold- 
ers,” a PeopleSoft 
spokesman coun- 
tered. He added 
that the refund of- 
fer is “very posi- 
tive for customers 
and very positive 
for shareholders.” 

PeopleSoft user 
John Schindler, CIO at lighting 
fixtures maker L.D. Kichler 
Co. in Cleveland, voiced con- 
tinued disapproval of Oracle’s 
unsolicited buyout bid. “Let’s 
put a stake in it and call this 
whole thing done,” said 


Oracle Corp. 


{People- 
Soft is] out 
of step with the 
current environ- 
ment of corpo- 
rate governance. 


CHUCK PHILLIPS, 
executive vice president, 


Schindler, who 
managed an instal- 
lation of Oracle’s 
applications at a 
previous employer 
and is a former 
member of the 
Oracle Applica- 
tions Users 
Group’s board. 

But Kyle Lam- 
bert, vice presi- 
dent of informa- 
tion solutions at 
John I. Haas Inc., 

a Washington- 
based hops grower 
that uses Oracle’s 
software, said he 
had never heard 
of a poison-pill 
provision like the one being 
employed by PeopleSoft. 

“I think the tactic that Peo- 
pleSoft is taking is a desperate 
attempt by the CEO and the 
executive staff to prevent a 
stockholders vote on the mat- 


www.computerworld.com 


ter,” Lambert said. 

Like Schindler, though, 
Lambert wants the companies 
to quickly resolve the takeover 
fight. “If the deal makes sense, 
great,” he said. “If the deal 
does not, move on.” 

In addition to the ongoing 
court proceedings in Dela- 
ware, the two vendors are 
waiting for the U.S. Depart- 
ment of Justice to announce 
whether it will oppose the 
deal on antitrust grounds. 

Oracle officials had hoped 
to get an answer from the DOJ 
this month. But according to 
Phillips, DOJ officials now say 
that a decision might not be 
announced until next month 
or January. 

Oracle requested the expe- 
dited ruling on its poison-pill 
suit just days after attorneys 
pursuing a shareholder class- 
action lawsuit against People- 
Soft filed a separate motion to 
block the company from 
promising refunds to its users. 
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ORACLE STATES ITS CASE 


To read all of our interview with Oracle's 
Chuck Phillips, visit our Web site: 
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Continued from page 1 
AT&T Wireless 
Customer service workers 
at AT&T Wireless ran into sig- 
nificant delays in setting up or 
modifying GSM/GPRS calling 

services, Siegel said, adding 
that the company was still try- 
ing to deal with a backlog of 
new users last week. 

“We continue to work 
through issues associated with 
the software,” he said. “We’ve 
made tremendous progress in 
clearing the matter up. There’s 
a good chance folks walking in 
to activate their GSM service 
will be able to do it in pretty 
much normal intervals.” 

However, some customers 
got fed up with waiting and 
took their business elsewhere. 
Ian Drake, an independent IT 
consultant in Hartford, Conn., 
said he switched to Verizon 
Wireless when he was unable 
to resolve start-up difficulties 





on an AT&T Wireless service 
he ordered online Oct. 22. 

“T had lost so much time 
with the runaround that it was 


| affecting my consulting prac- 


tice,” Drake said, adding that 
he got “bounced around to no 
end” when he called customer 
service at AT&T Wireless. 
Even canceling his contract 
proved to be difficult. Drake 
said he was informed that the 
cancellation couldn’t be proc- 
essed because the CRM sys- 
tem was down. After multiple 
calls, a customer service 


Seeeeecercccscessseesceseesesee 


& Sometimes, 
what happens 
in a big cutover is it 
doesn’t perform in 
the way that you 
hoped it would. 


MARK SIEGEL, SPOKESMAN, 
AT&T WIRELESS SERVICES 





worker told Drake he would 
be contacted when the order 
was revoked. “I’m not holding 
my breath,” he said. 


No Answers Forthcoming 
AT&T Wireless wouldn’t say 
how many customers were af- 
fected by the system woes, nor 
would the Redmond, Wash.- 
based company specify what 
caused the problems. “We're 
not engaging in any post- 
mortems,” Siegel said. 

AT&T Wireless in 2001 an- 
nounced plans to standardize 
its customer-facing operations 
on Siebel’s CRM applications. 
Siegel wouldn’t comment 
about Siebel’s current involve- 
ment with the company, but 
he said the upgrade problems 
weren't caused by shortcom- 
ings in the software. 

“This is our responsibility,” 
Siegel said. “It doesn’t matter 
who developed [the soft- 
ware].” The CRM system has 





helped improve productivity 


by giving AT&T Wireless 
workers access to “much more 
robust information about our 
customers,” he noted. “But 
sometimes, what happens ina 
big cutover is it doesn’t per- 
form in the way that you 
hoped it would.” 

Drake said he was told by an 
AT&T Wireless employee 
“that this problem was a 
Siebel upgrade gone wrong.” 

A systems administrator at a 
financial services firm in the 
Western U.S. said he was giv- 
en a similar message last 


| Tuesday after he tried for a 


second time to buy a GSM 
phone from AT&T Wireless. 
The administrator, who asked 
not to be identified, said he 
bought the first phone at a re- 
tail store on Nov. 1, the same 
day the CRM upgrade took 
place. After being unable to 
activate the phone for eight 
days, he decided to return it. 
A Siebel executive declined 
to comment on the situation 





and referred questions to 
AT&T Wireless. 

GSM (Global System for 
Mobile Communications) and 
GPRS (Global Packet Radio 
Service) are cellular telephone 
standards. The balky CRM 
system is used to automate 
various GSM/GPRS account 
management functions, such 
as tracking and processing 
new service orders. 

AT&T Wireless said cus- 
tomers who use its Code Divi- 
sion Multiple Access network 
are handled by a different 
CRM system and weren’t af- 
fected by the upgrade prob- 
lems. @ 42831 


Stacy Cowley of the IDG News 
Service contributed to this story. 


ALL ABOUT CRM 


For more stories about customer-facing 
technology, go to our online CRM 
Knowledge Center: 
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APPLICATIONS 


Imagine your applications — both legacy and 
new — performing together as an ensemble. 

That vision can become a reality surprisingly 
quickly with Ensemble, the comprehensive inte- 
gration platform with all the functionality you 
need to rapidly complete any type of integration 
project on deadline and on budget. Even complex 
projects you may have struggled with in the past. 

With its unique fusion of powerful technologies 
for application integration, development, deploy- 
ment, and management, Ensemble enables 
extremely fast integration and rapid development 
of “composite applications” — new business 


solutions that integrate data, orchestrate business 


InterSystems 


processes, and enhance the value of legacy applica 
tions. You'll see real-world evidence of this in the 
customer testimonial section of our web site.* 

Ensemble is exciting new software from 
InterSystems. Over the past twenty-five years our 
high performance products have been deployed 
in more than 100,000 mission-critical systems 
around the world. 

We’re so confident that Ensemble is drama 
tically faster than any other integration technology, 
we'll be happy to begin our partnership with you 
by conducting a pilot project. To pursue this, 
contact us at: 
www. InterSystems.com/Ensemble/Pilot 


=: ENSEMBLE 


Integrate Applications Faster 


*Read how companies like yours have integrated applications faster with Ensemble: www.InterSystems.com/Ensemble/Customers 
If you are a System Integrator in need of a rapid integration platform, come to www.InterSystems.com/Ensemble/Partners 
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NEWS 


HP Combines Tools to Unify 
Management of Its Server Lines 


Announces products, deals in bid to 
expand autonomic computing strategy 





BY MATT HAMBLEN 

EWLETT-PACKARD 

Co. last week an- 

nounced more than 
40 IT management 
products and services in an 
effort to further its autonomic 
computing initiative, including 
new software that provides 
systems management capabili- 
ties across its Windows, Linux 
and Unix server lines. 

The cross-platform product, 
called Systems Insight Manag- 
er, brings together three tools 
that HP previously sold sepa- 
rately and unifies management 
of the company’s ProLiant, In- 
tegrity and HP 9000 servers. 
The product can also handle 
plug-in tools for managing PCs, 
storage devices, printers and 
power supplies as well as some 
third-party software, HP said. 

In addition, HP said that 
Systems Insight Manager can 
be integrated with OpenView 





Operations and OpenView 
Network Node Manager, the 
company’s flagship enterprise 
management tools. 

Subhash Tantry, executive 
vice president of engineering 
and operations at CenterBeam 
Inc., said the San 
Jose-based IT out- 
sourcing vendor 
wants to use Sys- 
tems Insight Man- 
ager in its data 
center, which 
houses hundreds 
of servers for the 
company’s North 
American cus- 
tomers. Center- 
Beam runs HP’s 
Insight Manager 7 tool now 
but needs the new software’s 
cross-platform capabilities. 

“We service the midsize 
market, and the diversity of 
hardware and software is 
huge,” Tantry said. “We prefer 


We ser- 
vice the 
midsize market, 
and the diversity 
of hardware and 
software is huge. 


Ce ereccceseeeeesseseseses 


SUBHASH TANTRY, EXECU- 
TIVE VP, CENTERBEAM INC 


to have one [management 
tool] that is extensive and 
monitors multiple nodes.” Sys- 
tems Insight Manager also has 


| a “more intuitive and process- 


oriented interface,” he added. 

Because of the nature of its 
business, CenterBeam has 
tried to keep abreast of all the 
management products from 
HP and its competitors, such 
as Computer As- 
sociates Interna- 
tional Inc. and 
IBM’s Tivoli 
software unit, 
said Brian John- 
son, director of 
public relations 
at CenterBeam. 

“HP is on the 
right track” by 
attempting to 
bring all its man- 
agement tools under its auto- 
nomic computing strategy, 
Johnson said. 

In addition to introducing 
Systems Insight Manager and 
other products (see box), HP 
said it plans to buy Persist 


| Technologies Inc., a Pleasan- 
ton, Calif.-based vendor of 
software for archiving e-mail 
messages, Microsoft Office 
data and other types of infor- 
mation. HP didn’t disclose the 
cost of the acquisition, which 
is part of its plan to develop a 
set of information life-cycle 
management tools. 

HP also announced an 
agreement with business ap- 
plications vendor SAP AG, un- 
der which they will work to- 
gether to facilitate manage- 
ment of IT infrastructures at 
large companies that want to 
adopt autonomic computing 
— or adaptive management, in 
HP’s parlance. Another facet of 
last week’s rollout was a set of 
IT management best practices, 
including new certification 
programs and process tem- 
plates designed to help users 
align IT with business needs. 

The series of announce- 
ments are typical for HP, 
which tends to lump dozens 
of management software revi- 
sions into announcements 
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NEW PRODUCTS 


Autonomic Software 


@ Systems Insight Manager: 
Cross-platform systems manage- 
ment software that combines 
HP's Insight Manager 7, TopTools 
and Service Control Manager 
applications. 


= OpenView Management Inte- 
gration Platform: Integrates 
management data, initially for 
Web services and service-orient- 
ed architectures. 


= OpenView Select Access: 
Aset of identity management 
software and services for authen- 
ticating end users. 


every six months, said Laura 
Koetzle, an analyst at For- 
rester Research Inc. in Cam- 
bridge, Mass. 

Koetzle said that HP “is 
making a lot of strides in ra- 
tionalizing all the systems 
management software it has.” 
She gave HP a slight edge over 
Tivoli in the race to develop 
autonomic management tools. 


@ 42842 


FREE DELL TOOLS 


Dell moves into systems management 
further, announcing three free tools: 
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Continued from page 1 
Virtualization 


before it will offer support. 

“Microsoft’s current stance 
{on support] is a problem,” 
said Eric Kuzmack, an IT ar- 
chitect at Gannett Co. in Silver 
Spring, Md. Kuzmack said he 
doesn’t know whether the 
support policy will influence 
his future rollouts of VMware, 
but he noted that it makes Lin- 
ux a more attractive option 
from a support perspective. 

Virtual machine technology 
“is important enough that the 
fact that there is not a support 
issue running Linux [in a vir- 
tual environment] weighs on 
our decision as to what we 
deploy,” Kuzmack said. 

Bob Armstrong, director of 
Internet and information sys- 
tems at Delaware North Cos., 
a hospitality services provider 





in Buffalo, N-Y., said moving 
a Microsoft product from a 
VMware environment to a 
physical environment takes 
about six hours. 

But he noted that despite 


| Microsoft’s stated policy, the 


company’s technical support 
personnel tend to be flexible 
in offering some support in 

a VMware environment. “Six 
months ago, it was end of sto- 
ry,” said Armstrong, adding 
that now his company is get- 
ting less resistance for help. 

Michael Mullany, vice presi- 

dent of product marketing at 


| VMware in Palo Alto, Calif., 


claimed that Microsoft’s sup- 
port policy exists for “compet- 
itive reasons.” He said support 
of Windows isn’t an issue for 


| Hewlett-Packard Co. and IBM, 


both of which offer Windows 

support for products running 

in the VMware environment. 
Eric Berg, a Microsoft group 





product manager, defended 
the policy. “If you look at the 
virtual machine, in many ways 
it’s like another operating sys- 
tem running on top of an op- 
erating system,” he said. “We 
don’t have visibility into how 
that software operates, and to 
us it looks like a black box.” 
Asked whether the policy 
was put in place for competi- 
tive reasons, Berg said it exist- 
ed before the Connectix acqui- 
sition. “This was consistently 
our support policy,” he said. 


While Microsoft has the 
market dominance and wealth 
that enable it to cut prices, 
VMware’s strength may be its 
technological lead. The com- 
pany says it has several key 
patents, and its customer base 
includes 80% of the Fortune 
100. Last week, it released 
VMware VirtualCenter, which 
allows users to move virtual 
servers to new physical servers 
without service interruption. 

Brad Day, an analyst at For- 
rester Research Inc., said 





ales s)ie-U Lays s ULC) 


The “host” is the main operating system supporting the virtual 
instances of an operating system, which are known as “guests.” 


ADV Supports either Win- 
dows or Linux as host. 


ADVANTAGE: Full support for Win- 
dows products. 





) Microsoft won’t 
support its products in VMware 
environment. 


SADVANT 


DISADVANTAGE: Supports Linux 
as guest only. Windows is host. 





VMware “is 18 to 24 months 
ahead of Connectix in terms 
of functionality.” 

But Microsoft may have an 
edge in companies that al- 
ready rely heavily on its sys- 
tems. Carlos Vargas, a network 
engineer at Ingersoll-Rand Co. 
in Woodcliff Lake, NJ., said he 
has been beta-testing Micro- 
soft’s Virtual Server and ex- 
pects that it will cost less than 
VMware’s comparable prod- 
uct, based on Microsoft’s Vir- 
tual PC pricing. 

But Vargas said cost won’t 
be the deciding factor. He said 
Ingersoll-Rand is standardiz- 
ing on Microsoft products, 
and unless it finds that Virtual 
Server isn’t meeting its needs, 
he doesn’t expect the compa- 


ny to seek out another prod- 
uct. @ 42840 


Computerworld’s Carol Sliwa 
contributed to this story. 
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NEWS 





Red Hat Users Balk at 
Enterprise Linux Licensing 


Critics sav support plan | process large amounts of data or to run 


violates spirit of GPL 


a widely used “network edge” applica- 
| tion like a Web or file-and-print server. 





BY ROBERT MCMILLAN 


For Lawrence Livermore National 
Laboratory, which pays Red Hat’s pro- 


Some Red Hat Inc. users are finding it | fessional services group a flat rate for 


difficult to come to grips with the 
company’s recent decision to provide 
support only to users who purchase a 
support license for every copy of Red 
Hat’s server software that they run. 
Effective April 30, 2004, Raleigh, 


on-site support of Red Hat Linux, the 

switch to the Enterprise Linux pricing 
| model is daunting. “The base price for 
| Enterprise Linux is $179 per system, “ 

said Robin Goldstone, the leader of the 
| lab’s Production Linux Group. “We 


N.C.-based Red Hat will cease mainte- | have 4,000 nodes worth right now. 


nance of Red Hat Linux 9. As of that 
date, Red Hat Enterprise Linux will be 


| That’s almost $800,000.” 
For those customers who are resist- 


the only version of the server software | ing the pricing model, Red Hat is 


available for purchase. But some users | showing some flexibility. The company | 
said the Red Hat Enterprise Linux sup- | is developing new eight-processor sup- | 
port contract is in conflict with the 


spirit of Linux’s software 
license, known as the 
GNU General Public 
License, or GPL. 

Although the GPL lets 
users freely make as 
many copies of Linux as 
they like, Red Hat’s ser- 
vice agreement compels 
customers to pay an an- 
nual per-system licensing 
fee in order to receive 
bug fixes, patches and 
technical support. The 
agreement also prohibits 
the unauthorized copying 
of Red Hat Enterprise 
Linux. 


Many companies that are migrating 
to Linux from expensive Unix-based 


port licenses that are designed to have 


odd that the computing users, accord- 


ing to Red Hat spokes- 


most advanced woman Leigh Day. She 
operating system couldn’t say when such a 


license would be avail- 


that we’ve gotis ui. 
using the worst 
financial model 
from the 1970s. 


GEORGE JOHNSEN, CHIEF 
ANIMATION AND TECHNICAL 
OFFICER, THRESHOLD DIGITAL 
RESEARCH LABS 


. “ a more appealing price 
's It S$ kind of for high-performance 


In the meantime, users 
such as Corey Corrick, 
director of operations at 
Web services provider 
Flamenco Networks Inc. 
in Alpharetta, Ga., are in 
a quandary. 


| Hat or to evaluate a different technolo- 
| gy” like FreeBSD to run applications 


systems are content to pay the per-sys- | such as the Apache Web server, he 


tem licensing fees, which range from 
$179 to $18,000. But some customers, 


said. Flamenco is a heavy user of Nov- 
| ell Inc. products and Corrick said it 


especially those who cluster together a | could take a closer look at SUSE Linux 


large number of computers, are balk- 


ing at the fees. 


“It’s kind of odd that the most ad- 


| AG, which is being acquired by Novell. 


John Young, vice president of market- | 


| ing at Red Hat, said the company made 


vanced operating system that we’ve got | the moves because corporate users 
is using the worst financial model from | didn’t appreciate the frequent release 


the 1970s,” said George Johnsen, chief 
animation and technical officer at 
Threshold Digital Research Labs, a 


| cycles of the standard Red Hat Linux 
and are aided by the extra features, ca- 
pabilities and longer release cycles of 


digital animation firm in Santa Monica, | the enterprise version. @ 42758 
Calif. Johnsen compared Red Hat’s li- - 


censing to the mainframe licensing 
model, saying that it’s cumbersome 
and fails to take into account the eco- 
nomics of large-scale computer users. 





McMillan writes for the IDG News 
Service. Todd R. Weiss contributed to 
| this report. 


“They’ve kind of forced 
our hand to, in the future, | 
| move either to a for-pay version of Red | 





Johnsen is typical of a growing class DESKTOP LINUX 


of Linux users: customers who pur- 
chase a large number of identically 
configured commodity systems to 


Making a case for running Linux on the client 
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OPINION 


MARYFRAN JOHNSON 


ring On the Scrutiny 


OP QUIZ: Ina climate where regulations 

affecting data protection, customer privacy 

and financial reporting are on the increase, 

which answer best describes how CIOs 
should view their new oversight duties? 


A. As a compliment. 

B. As an opportunity. 

C. As a career-enhancing 
responsibility. 

D. As all of the above. 

Yes, you read those 
choices correctly, and 
yes, the answer is D. I 
couldn’t have been more 
surprised, but that’s what 
I heard last week during 
a panel discussion on 
“The Scrutinized CIO” at 
a Society for Information 
Managers (SIM) executive summit in 
Chicago. 

“I take [the scrutiny] as a compli- 
ment and an opportunity,” said Frank | 
Modruson, CIO and managing part- 
ner at Accenture. “Internal IT invest- 
ments are large and important for 
the business. This gives usaforum | 
to talk about where we’re investing 
and how we're driving the company 
forward.” 

“I don’t mind the scrutiny. It helps 
position me with my peers,” added 
Cathy Brune, CTO and senior vice 
president at Allstate Insurance. “All 
executives are being scrutinized 
now. If I will sit and take it — and 
change my organization as needed — 
that gives me the right to do a little 
scrutiny on the other side, too.” 

Indeed, many senior IT leaders 
may find themselves reporting not 
only to the CFO but also on him, and 
on how well company finances mea- 
sure up in the new regulatory cli- 
mate. “All of us are thinking differ- 
ently about where the money is 
spent,” said Brune. “We’re looking at 
all the transaction flows.” 

As we noted in a recent story 
[“Sarbanes-Oxley Mandates Lead to 
IT Certification Push,” QuickLink 
42512], some CEOs and CFOs are 
turning to IT organizations to certify | 





the systems used in proc- 
essing financial data. New 
accounting acronyms like 
SAS 70, an auditing stan- 
dard, are becoming part 
of the IT lexicon, and that 
ever-elusive goal of align- 
ing business and IT 
seems (dare we hope?) 
closer than ever. After 
years of struggling to fos- 
ter tight relationships be- 
tween technology and 
business execs, who 
would have expected Uncle Sam to 
step in as the matchmaker? But there 
you have it. 

Of course, the scrutiny extends be- 
yond financial records into the equal- 
ly business-critical areas of customer 
privacy and data protection. 

“Privacy, security and confiden- 
tiality should be on all of our radar 
screens, and CIOs should be leading 
here,” said John Moon, CIO at Baxter 
International Inc. and a speaker at 
the SIM summit. He noted that while 
IT at the health care and pharmaceu- 


FoR YEARS , OUR 
SOFTWARE HAS OFF 
THE OPPORTUNITY To 
CREATE VIRUSES. 


tical giant this year has been all 

| about “driving efficiencies and re- 
ducing expenses,” next year the fo- 
cus will shift to “enabling business 
change and growth.” 

That shift isn’t just happening at 
Baxter, Allstate and Accenture. 
Everywhere that IT executives gath- 
er these days; the talk centers not 
only on mitigating risks, but also on 
enabling business change. And how- 
ever gradually it’s improving, the 
economy seems to be cooperating as 
it heads upward. In line with the 
findings of other market researchers, 
Forrester Research recently polled 
818 North American companies and 
predicted overall IT spending 
growth of 4% next year. Topping the 
list of spending plans were “risk mit- 
igation strategies” in security and 
disaster recovery, but e-commerce 
initiatives with supply chain part- 
ners also ranked right up there as a 
top priority. 

Leading IT organizations are 
evolving from cost centers and ser- 
vice providers into strategic partners 
and enablers. “I can see the push 
everywhere now to converse about 
IT as an enabler of the business,” 


| said Allstate’s Brune. 


So bring on the scrutiny, and 
watch IT rise to the occasion. 
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PIMM FOX 
His 
Master's Fax 


OICE MAIL changed 
the way I think about 
faxes. 

When I returned from Paris 
recently, I opened my e-mail 
client and discovered my faxes (no big 
deal) and a voice-mail message attached 
to an e-mail (now that’s a big deal). I 
didn’t know, until then, that both faxes 
and voice mail could be received and 
managed from my e-mail client. 

That got me thinking that companies 
that are still spending money on fax 
and voice-mail infrastructures are 
throwing away dollars and time. 

The ability to access voice mail and 
send and receive faxes via your e-mail 
in-box is so compelling a proposition 
that it might convince you to stop 
spending money on a stand-alone fax 
infrastructure. 

That infrastructure can be extensive. 
Phone lines, phone 
support and servers 
cost money and take 
up time and space. In 
addition, your twen- 
tysomething IT geeks 
don’t want to be 
messing with fax sys- 
tems; they’d rather be 
working on Web ar- 
chitecture. 

So consider explor- 
ing in this direction: 
outsourcing your fax 
and voice-mail service to a company 
like J2 Global Communications. 

Hollywood-based J2 already has 
2,000 corporate accounts and 30,000 
end users. Here’s the technology be- 
hind the service it offers many of them: 
Servers at one of J2’s 60 collocation 
sites receive faxes and answer calls. J2 
translates fax images to TIFF files and 
voice mails to WAV files and then at- 
taches the files to e-mails and forwards 
them to its customers. 

With J2’s Web-based management 
tools, you can centrally administer and 
provision fax numbers within minutes 
around the clock and around the globe. 
You no longer need to spend time call- 
ing phone companies to acquire phone 
lines, nor do you need to deploy ma- 
chines or technicians. It’s all done on- 
line. And assigning numbers to users is 
easy, with simple comma-separated 
files. It’s also possible to integrate the 





www.computerworld.com 


service with your ERP system for com- 
panies that may fax you orders. 

There are some additional features 
for security or working with a VPN. 
For example, health care, financial ser- 
vices and legal firms that want to en- 
crypt files can use a server from Red- 
wood City, Calif.-based Tumbleweed 
Communications Corp. This acts as a 
gateway at a J2 location and generates 
a domain-level public-key certificate 
that’s sent over the Internet to be de- 
crypted by a similar gateway at the 
user's site. The content is then distrib- 
uted via the normal e-mail server. VPN 
users can configure a router and drop 
it into the J2 data center, and all faxes 
will be funneled through the router to 
the user’s VPN. 

Right now, outbound traffic is lim- 
ited to 16MB, and inbound capacity 
is about 200 pages. That should be 
enough to handle a PowerPoint presen- 
tation that argues for doing away with 
your current fax — and voice-mail — 


technology. @ 42696 


MICHAEL 
GARTENBERG 


A lime to 
Wait, a lime 
To Deploy 


ECHNOLOGY is a con- 

stant stream of ad- 

vances. Thousands of 
products are released each 


year promising some way to 
either increase productivity or lower 
business costs while attempting to de- 
liver a sound ROI. However, it often 
seems that many technologies are re- 
leased before they’re ready for the 
mainstream and that gains end users 
are supposed to achieve are negated as 
a result of poor design, buggy code or 
just being too far ahead of the technol- 
ogy curve. This is the pitfall of the ear- 
ly adopter, but by adhering to certain 
adoption guidelines, you can help 
avoid this pain and deploy technology 
effectively. 

The first guideline is simple: There 
is a worldwide market of 50,000 for 
anything. Unless your organization is 
composed entirely of parts of this 
group of 50,000 (folks who install op- 
erating systems on a Sunday afternoon 
as a form of entertainment), you need 
to look beyond technology for the sake 
of technology and see if what you’re 


OPINION 


about to deploy falls into 
one of three categories. If it 
doesn’t, you might want to 
wait for Version 3.0. 

1. Visible differentiation. Is the 
product really different? 


| When Apple introduced the 


Macintosh, the product 
could easily be discerned by 
anyone at a distance of 100 
paces as being vastly differ- 
ent from anything else on 
the market. Early Macintosh 
buyers rarely felt buyer’s re- 
morse, because they could 
do things that they couldn’t 
do previously. 

2. A measurable increase in productivity. 
Can you objectively chart a productivi- 
ty boost? Mobile computing devices 
such as notebooks, cell phones and 
BlackBerry e-mail clients all paid back 
early adopters in gains that were easily 
quantifiable. Of course, you want to 
make sure that those gains apply to 
you. For example, if your users rarely 
need to leave their desks, you won’t 


see the same gains ona 
mobile e-mail device that a 
road warrior might. 

3. Justifiable TCO. If it isn’t 
noticeably different or 
won't increase productivi- 
ty, new technology had bet- 
ter save you some money. 
Technology such as soft- 
ware management systems 
have significant upfront 
costs, but measurably low- 
er TCO. 

There are also three 
things to watch out for. 

1, Unproven platforms. Many 
new technologies want to 

achieve status as a de facto platform. 


| Many vendors feel that if they add an 
| API set, they can then call a product a 
“platform.” The reality is that few tech- 


nologies will ever achieve true plat- 
form status, and it’s best to beware of 
any technology that purports to be a 
new platform or paradigm (especially 
if it can’t meet the criteria above). 

2. Measurable but hard-to-detect perfor- 
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mance gains. Though vendors often 
claim vast speed differences, remem- 
ber that performance that can be mea- 
sured with a stopwatch might not actu- 
ally be noticeable in real-world use. 

3. Partial solutions. Finally, some prod- 
ucts seem like good ideas but are realiy 
only partially carried to fruition. Ap- 
ple’s Newton is a great example. It was 
arguably one of the finest PDA operat- 
ing systems ever created, but it lacked 
the seamless synchronization of data 
(an oversight corrected by Palm, which 
built an operating system that was a 
success even though it had only a frac- 
tion of the Newton’s power). 

Many businesses have survived the 
economic downturn in part by cutting 
back on IT spending. The IT organiza- 
tions at those companies need to be 
even more careful about how they de- 


ploy new technologies. @ 42691 
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Blade Beginnings 
HE VERY FIRST blade servers, 
from RLX, were actually de- 

signed to solve the power problem 

for the Web hosting/Web serving 
market segment [“Moving Toward 

Meltdown,” QuickLink 41566]. A 

rack full of 336 (yes, we could run 

336 servers in a rack safely) RLX 

ServerBlade 633s consumed only 

about 3.3 kilowatts at average load, 

2.4 kilowatts at idle, and 4.5 kilo- 

watts at absolute peak, fully loaded 

with everything spinning, even 
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| | What's the Word? 


| though that was highly unlikely to 
| happen. The problem was that the 
venture capitalists that funded RLX 
wanted more than the Web market 
segment, and so the company 
changed its strategy to go after the 
mainstream server market and has 
ended up in a head-on collision with 
the Tier 1 vendors. | know all of this 
| because | was the person who 
| came up with the concept, co- 

| founded RLX and designed its first 
| two hardware platforms. 

Christopher G. Hipp 

Redwood City, Calif. 


SSN Can Identify but Not Authenticate 


HE PROBLEM with Social Secu- 
rity numbers isn’t their overuse, 


but their misuse [“Nine-Digit Dilem- | 
| and begin to address the issue of 


ma,” QuickLink 41704]. The SSN is 
a reasonably good identifier. True, it 
misses aliens, and it's often aliased, 
by a military spouse in need of 
health care, for example. But for the 
most part, my SSN does a pretty 
good job of clearing up the issue of 
which Michael Martin | am 

The real problem is that we try to 
use the SSN for authentication, as if 
knowing my SSN proves you are 
me. But | need to disclose my SSN 
to anyone with a legitimate need to 
identify me. Anyone who needs me 
to prove that | am the Michael Mar- 


tin | claim to be needs to demand 
| some other type of proof. 
We need to accept this conflict 


how best to authenticate ourselves 
in various situations. Simply provid- 
| ing my identifier will never be the 
appropriate means of authentica- 
tion, no matter how thinly we divide 
up identifiers. Even if | use my SSN 
only with the Internal Revenue Ser- 
vice, anyone at the IRS can stil! im- 
personate me. 

Michael K. Martin 


| . . . . 
Director, medical informatics, 


M&M Informatics, 


| Columbia, S.C., martinmkm@ 
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HE COLUMN “Stop ‘Gathering’ 

IT Requirements” [QuickLink 
41565] describes no real problem 
other than semantics and serves 
only to fan the flames for business 
users and inexperienced IT workers 
who don't believe we should follow 
any kind of structured requirements- 
gathering process. The article makes 
too big a deal of the word gathering, 


| asifit's some sort of technical blas- 
| phemy. It's just a word that is com- 





monly used in the industry and has 
been for many years. Even business 
users know that and don’t seem to 
have a problem with it. 


| Rick Woods 


Irving, Texas, 
rickwoods@yahoo.com 


| Beware of Analysts’ 
| Outsourcing Advice 


HE ARTICLE “Market Research 
Providers Confront Credibility 


| Concerns” [QuickLink 42031] ac- 
| knowledged the widely held view 


that IT market research firms like 


| Forrester and Gartner have been 


producing biased, vendor-spon- 
sored research for some time. 
What was not addressed is the 


| fact that these same firms have 


been leading the charge on offshore 
outsourcing. For the past year or 
more, these firms have bombarded 
the media with their research and 
projections on offshore outsourc- 


| ing. It isn’t widely reported that For- 
| rester, Gartner and probably others 
| have their own offshore outsourcing 
consultancy divisions, which seek 

| to profit from the same “research” 

| they generate. This is unethical, 


self-serving and a huge conflict of 
interests. 
Many ClOs have made the un- 


| wise decision to offshore their IT 

| departments based mainly on the 

| self-serving propaganda generated 
| by these firms. 


Robert Kleefisch 


| Homewood, IIl., 
| rkleefisch@comcast.net 


| COMPUTERWORLD welcomes 

| comments from its readers. Letters 

} will be edited for brevity and clarity. 

| They should be addressed to Jamie 
| Eckle, letters editor, Computer- 

| world, PO Box 9171, 500 Old Con- 

| necticut Path, Framingham, Mass. 

| 01701. Fax: (508) 879-4843. 

| E-mail: letters@computerworld.com. 
| Include an address and phone num- 
| ber for immediate verification. 


For more letters on these and 
other topics, go to 


| www.computerworld.com/letters 





YOU’VE BEEN WAITING 
FOR THE NEXT GENERATION OF NETWORKING 
AND ALL THIS TIME, IT’S BEEN RIGHT THERE WAITING FOR YOU 


Within your notebooks, PDAs and networking gear are chips that enable you to more securely unleash the full power of high-speed 
wireless networking. When Dell®, HP®, palmOne® and Sony Ericsson® are looking for best performance, they turn to Broadcom®. In fact, 
our 54g™ wireless LAN chips are available in over 95% of major notebook brands offered with 802.11g.' And with Broadcom you can 


expect interoperability among 802.11a/b/g networks and powerful security for your wireless LAN, with CCX, WPA, and AES technologies 


built in. Whether you’re on a wireless PAN, LAN or WAN, Broadcom solutions ensure the devices you use today—and those you add 


tomorrow —will connect reliably, seamlessly and securely. 


Find out how to build upon the Broadcom® chips inside 
your devices to create a secure high-performance 
wireless network. Download our new white paper 
“Practical Strategies for Deploying Wi-Fi® Clients” now at 
www.computerworld.gobroadcom.com/wireless 
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KNOWLEDGE CENTER 
STORAGE 


The Story So Far 


David A. Patterson, who led the 
team that developed the idea of 
RAID storage at the University of 
California, Berkeley, describes the 
thinking behind RAID. Page 28 


UIZ03_ 


The Next Chapter 


Industry visionaries say they 
foresee cell phones that pack a 
terabyte of storage and “object- 
based storage” that replaces 


databases. Page 58 





Disk capacity is doubling 
every year. Prices are 
dropping. What’s not to 
like? Plenty, says columnist 


Mark Hall. Page 44 





EDITOR’S NOTE 


T'S CLEAR that data storage is 
more important than ever. Take a 


Sarbanes-Oxley Act, but the Food and 
Drug Administration also heavily requ- 


look at these factoids (surely head- 
ed to a PowerPoint slide near you): 

w Globally, there was a 30% increase 
in stored information (of all sorts) from 
1999 to 2002. Storage on hard disk 
drives rose 114%. (Source: University 
of California, Berkeley) 

w “Storage is the fastest growing cap- 
ital cost within the data 
center and in many enter- 
prises.” (Gartner Inc.) 

w Data centers will dou- 
ble their storage needs 
every 18 to 24 months. 
(Gartner) 

w Federal regulators have discovered 
IT storage, big time. (Computerworld) 

Actually, government agencies such 
as the IRS have been concerned about 
records storage since the dawn of the 
Computer Age. What's new is the accel- 
erating pace of records management 
laws in the past few years. Not only are 
there the well-known Health Insurance 
Portability and Accountability Act and 


a 
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New regulations have 
Il’ managers scurry- 
ing to make sure their 
storage systems comply. 


QuickLink k1700 
computerworld.com 


lates record keeping in the drug, medical 
device and biotech industries. And the 
SEC continues to require broker-dealers 
to use “non-rewriteable and non-eras- 
able” storage technology [QuickLink 
38369]. 

The general trend - described in the 
special report that follows - is that the 
new laws require compa- 
nies to store more data, for 
longer periods of time and 
in a form that can't be tam- 
pered with. 

But don’t take my word 
for it - or the word of stor- 
age vendors that see the new laws as a 
great sales tool. Instead, work closely 
with your company’s legal department to 
find out how your storage infrastructure 
needs to adapt to the new rules of the 
game. @ 42525 
Mitch Betts is Features editor at 
Computerworld. He can be contacted 
at mitch_betts@computerworld.com. 


Of Storage 
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David A. Patterson led the team at the 
University of California, Berkeley, that 
developed the idea of RAID storage. In 
an interview with Frank Hayes, Patter- 
son recalled the beginnings of his RAID 
project in 1987. 


E HAD JUST been working 

on RISC processors, and 

we consciously said, 

‘Processors are going to 

start getting fast, improv- 
ing faster than they have in the past. So 
what are we going to do about I/O?’ 
That was one motivation. 

“The other one was that Randy Katz 
[one of Patterson’s colleagues at Berke- 
ley] got a Macintosh, and it had a hard 
disk in a separate box next to it. And 
he said, ‘That’s kind of interesting; 
here’s a much smaller disk than I’m 
used to. What could we do with that as 
a building block?’ 

“So we held a graduate course where 
we started off with some rough ideas, 
and then we and the graduate students 
— Garth Gibson, Pete Chen, Ed Lee, 
Ann Chevernak, Ethan Miller — met 
and talked and read papers, and the 


Berkeley, that developed re 
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Redundant Arrays of Inexpensive 
Disks turned out to be expensive 
— but dependable. 


ideas evolved from there. 

“But when we tried to tell people 
our ideas, they couldn’t understand. 
They’d say, ‘Oh yeah, that’s the same 
thing that IBM’s been doing forever in 
terms of mirroring.’ Or, ‘Oh yeah, 
Thinking Machines, they’ve got a 
product in this area.’ And so when we 

tried to explain things, 

they assumed what 
we'd done had already 
been subsumed by 
other work. 

“That motivated us 
to write a paper [“The 
Case for Redundant 
Arrays of Inexpensive 
Disks’ ]. It advocated 
that we should be re- 
placing these big disks 
by lots of small disks. 

5 Basically, a big, rela- 
© tively thick disk that 
5 has to spin fast is 

“ mv-h less efficient 





than lots of small disks, and we get all 
these benefits in terms of volume and 
footprint and power. We submitted the 
paper to the database conference SIG- 
MOD, and Garth Gibson [the lead 
graduate student on the project] and 
I went to a short course 
that was given at Santa 
Clara University by Al 
Hoagland, who was kind of 
the godfather of the disk in- 
dustry. We came with 20 or 
30 copies of our report and 
handed it out at that meet- 
ing, and that was a good thing to do. 
The paper just clicked. It was a good 
time, I guess, for that set of arguments. 
“We built the RAID I [in 1989] to try 
the ideas in software. For RAID II [in 
1993], we said, ‘Let’s try to build a high- 
performance I/O system that connects 
over a network.’ Then at the end of the 
project, we had a little demo where we 
pulled the disk out and the thing kept 
working. 





IN THE ARCHIVES 


For a quick tour of the history 
of storage, visit our Web site: 


@ QuickLink 32954 
www.computerworld.com 
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“We were still performance-orient- 
ed, thinking RAID was for perfor- 
mance, so we were shocked to see 
somebody write this up in Byte maga- 
zine. The PC community was obvious- 
ly not so performance-oriented as it 
was dependability-oriented, and they 
thought, Hey, less-expensive depend- 
able computing. 

“Tt really just took off after that. 
EMC decided to build mainframe stor- 
age out of PC disks. Compaq had RAID 
early, and Data General. And of course 
IBM had its own. We didn’t know IBM 
had its own RAID 5 set of ideas in the 
AS/400 line. IBM had completely inde- 
pendently done the same RAID part of 
the ideas but used large disks. 

“One of the surprises about RAID 
was it was so expensive. The I in the 
name when we coined the term was 
for inexpensive disks. But the system 
was so expensive, that was kind of 
awkward for marketing people. So 
Randy blessed the change to indepen- 
dent for I. Since the RAID boxes 
weren't cheap, that was probably a 
better name. 

“The current project 
I’m working on is ROC, 
Recovery-Oriented Com- 
puting. With the RAID 
stuff, we were always 
thinking performance, but 
obviously, dependability 
is the reason people are doing it. Peo- 
ple get mad if their program crashes, 
but they just go berserk if they lose 
data. The ROC philosophy is recover- 
ing fast when outages happen. That’s a 
different engineering ethic. Hardware 
will break, software has bugs, people 
will make mistakes. And if you believe 
that, then it makes sense to recover 
fast, rather than just try to make things 
that never break.” @ 42219 


1956: IBM officially 
announces the RAMAC 
305, the first hard disk 
system, which holds 


1962: IBM Advanced Disk 
File uses one head for each 
disk surface, eliminating the 
need for compressed air to 
5MB of data. position heads computers.» 
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1979: Al Shugart and 
Finis Conner launch Seagate 
Technology to produce hard 
disk drives for desktop 


1986: SCSI is officially 
standardized by the American 
National Standards Institute. 


1995: EMC develops 
the concept of network- 
attached storage. 
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1988: David A. Patterson 1998: Gigabit Ethernet 
leads a team that defines becomes a formal IEEE 
RAID standards for improved standard. 

performance, reliability and 

scalability. 





1979: Philips demonstrates 
optical storage drive technology 
as part of a joint venture with 
Control Data Corp. Commercial 
products appear five years later. 


1961: Ampex develops helical 
scanning video recording, which 
will later be adapted for high- 
capacity tape backup. 


1973: IBM's hermetically 
sealed Winchester hard 
disks become the standard 
design for disk drives.» 





In its first nine months of release, Backup Exec 9 has sold over 750,000 new 
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Regulated 
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says HIPAA is a catalyst for developing data storage policies. 





New rules are forcing 


a 


CO amen to buy more storage 
>velop new policies around 


suse. By Robert L. Scheier 


RIVEN BY CORPORATE 
scandals and privacy 
concerns, new laws and 
regulations are requiring 
organizations to store 
more data, keep it longer 
and make sure it’s accu- 
rate and easy to retrieve. 

In response, customers are buying 
more storage capacity and developing 
new storage policies to ensure that 
they comply with regulations such as 
the Health Insurance Portability and 
Accountability Act and the Sarbanes- 
Oxley Act. 

Here’s a look at these two storage- 
intensive regulations and how some 
organizations are keeping to the letter 
of the law while getting business bene- 
fits from their compliance dollars. 


Health Insurance 
Portability and 
Accountability Act 
(HIPAA) 


WHAT IT ENTAILS: Encourages the use of 
electronic transactions to increase effi- 
ciencies in the health care field. Securi- 
ty rules require health care providers 
and insurers to protect patient informa- 
tion and to ensure its availability in 
case of disasters. Requires medical 
records to be kept in their original form 





for two years after the patient’s death. 


INDUSTRIES AFFECTED: Health care 
providers, health care insurers and 
health claims clearinghouses. 


ENACTED: August 1996 


COMPLIANCE DEADLINE: Aprii 21, 2005, 
for most covered entities; small health 
plans have until April 2006. 


REGULATION ROAD MAP: Experts advise 
IT departments to consider new opti- 
cal technologies for long-term storage 


| of records and say productivity and 
| customer-service improvements could 


help pay for HIPAA compliance. 

Peter Gerr, an analyst at Enterprise 
Storage Group Inc. in Milford, Mass., 
says HIPAA’s requirements for long- 
term storage of medical records will 


force health care providers not only 
| to buy more storage, but also to cre- 


ate policies to manage it. A typical 
hospital generates SOTB to 70TB of 
magnetic resonance imaging and 
computerized tomography data per 
year and, in some cases, will need to 
keep and be able to access that data 
for decades. 


USER APPROACH: For Northwestern 

Memorial Hospital in Chicago, one of 

the first steps toward meeting HIPAA 
Continued on page 36 
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and the ultimate 64-bit server © = * 
to be the same server. 


The AMD Opteron’ processor, superior 32-bit performance with expanded 64-bit capability. 
It’s the only server processor designed to run your 32- and 64-bit applications simultaneously and without compromise. 
AMD Opteron runs on AMD64, a breakthrough architecture that enables 64-bit technology on the x86 platform—creating 
a new class of computing. 

AMD 
The world’s highest performing 2P and 4P industry standard servers # 
are now powered by AMD Opteron processors. Get unparalleled 32-bit 


performance and the ability to transition seamlessly to 64-bit computing. 


Opteron 


Leverage your existing investments while preparing for the future. It’s one architecture 
across your enterprise that offers industry leading performance for your 32-bit applications, and doesn’t 
require a forklift upgrade as more 64-bit applications emerge. It’s just another way AMD designs and builds 


processors with you in mind. For a closer look at the AMD Opteron processor, visit www.amd.com/opteron 
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MOBILE 
TECHNOLOGY 


Warranty Information: For a copy of applicable product warranties, write to: Warranty Information, P.O. Box 12195, RTP, NC 27709, Attn: Dept. JDJA/B203. IBM makes no representation or warranty regarding third-party products or services. “Prices 
do not include tax or shipping and are subject to change without notice. Reseller prices may vary. ‘Requires download of client software. Mobile Intel Pentium processors feature Intel SpeedStep® technology. With Intel SpeedStep, processor speed 
may be reduced to conserve battery power. ‘Based on IEEE 802.11b. This wireless LAN product has been designed to permit legal operation worldwide in regions in which it is approved. Operation on channels 12-14 is not permitted in all regulatory 
regions of the world. Consequently, the wireless LAN feature is limited to operate on channels 1-11 and will not support channels 12, 13 and 14. This product has been tested and certified to be interoperable by the Wireless Ethernet Compatibility 
Alliance and is authorized to carry the Wi-Fi logo. “Some software may differ from its retail version (if available) and may not include user manuals or all program functionality. Software license agreements may apply. °GB = 1,000,000,000 bytes when 
referring to storage capacity. Accessible capacity is less; up to 3GB is used in service partition. “Includes battery and optional travel bezel instead of standard optical drive in Ultrabay bay, if applicable; weight may vary due to vendor components, 
manufacturing process and options. Thinness may vary at certain points on the system. Telephone support may be subject to additional charges. If a machine is listed as having “Onsite service for select repairs” or “Limited” onsite service, this means 
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regulations protecting patient informa- 
tion was to buy a 12TB EMC Corp. 
Symmetrix server. 

Buying the storage-area network 
(SAN) to store and manage “things as 
mundane as e-mail or user files” was 
only the beginning, says Mike Carper, 
Northwestern Memorial’s director of 
technology management. The hospital 
used HIPAA as the springboard to up- 
grade its network, its access control 
software and even its 5,700 client PCs 
to acommon version of Windows XP. 
Users can now save data onto the SAN, 
not their local hard drives. 

“We're using HIPAA as a tool to help 
develop policies around data storage,” 
which was a task the hospital had to 
confront, with or without the regula- 
tions, says Carper. 

Northwestern Memorial is also us- 
ing HIPAA as an opportunity to up- 
grade its overall security capabilities. 
It’s using Novell Inc.’s NetWare to pro- 
vide role-based access-control and au- 
dit capabilities, along with the ability 
to audit which users have accessed 
which files. Carper says the hospital is 
also using Novell’s ZENworks manage- 
ment software to provide role-based 
application access, so when data entry 
clerks log on, for example, they see dif- 
ferent sets of applications than physi- 
cians see. 

Brooklyn’s Maimonides Medical 
Center migrated to two geographically 
separated SANs about two and a half 
years ago, says Mark Moroses, senior 
director of technical services. 

Complying with HIPAA wasn't his 
aim at the time, he says. Moroses’ goal 
was to handle the growth in data in his 
electronic medical record application 
and meet existing state and federal re- 
quirements to store patient records for 
at least seven years. 

Meeting HIPAA’s requirement for 
audit trails was a “pretty straightfor- 
ward” process of “keeping more log 
files for a longer period of time,” says 
Moroses. The disaster recovery re- 
quirements of HIPAA were met by us- 
ing the second SAN with a replicated 
version of the patient data. Using an 
IBM FASt Storage Server managed by 
DataCore Software Corp.’s SANSym- 
phony allows him to mix and match 
drives from different vendors as the 
price of storage falls and the medical 
center’s needs grow. 

As part of its HIPAA compliance, 
the Office of Group Benefits in the 
Louisiana Department of Natural Re- 
sources bought a STB IBM Enterprise 
Storage Server to consolidate data that 
had been stored on approximately 20 








servers, says CIO Rizwan Ahmed. 
The SAN, along with policy-based ac- 
cess-control software and fingerprint 
scanners to authenticate users, cost 
about $750,000. 

Yet Ahmed says, “We’ve saved at 
least as much as we spent” in in- 
creased productivity and improved 
customer service. He says he hopes to 
eventually use the centralized database 
to provide instant claims payments to 
doctors, which would cut administra- 
tive costs and “allow us to attract more 
and more providers, and the more 
providers we have, the more members 
we can attract.” 


Sarbanes-Oxley Act 


WHAT IT ENTAILS: Tightens corporate re- 
porting and audit practices; requires 
the retention of all working papers, 
correspondence and communications 
about a public company’s financial 
statements for seven years. 


INDUSTRIES AFFECTED: Accounting firms 
that audit the financial statements of 
publicly traded companies, although 
the companies themselves may also 
wish to retain the records. 


ENACTED: August 1, 2002 


COMPLIANCE DEADLINE: Most public 
companies must comply by June 15, 
2004; smaller U.S. business and foreign 
companies must comply by April 15, 
2005. 


REGULATION ROAD MAP: Experts suggest 
that IT departments work with their 
business managers to proactively de- 
velop policies and storage architec- 
tures that aid compliance. They should 


| consider new optical and disk-based 


storage technologies as a complement 
to tape for archival storage. 


KNOWLEDGE CENTER STORAGE 


[Buying a SAN to store and manage] 
things as mundane as e-mail or user 
files [was only the beginning.] We're 
using HIPAA as a tool to help develop 
policies around data storage. 


MIKE CARPER, DIRECTOR OF TECHNOLOGY MANAGEMENT, 
NORTHWESTERN MEMORIAL HOSPITAL 











Gerr recommends that business and 
IT managers work together to “under- 
stand the requirements that affect you, 
identify the data and content types 
that are required to be retained and for 
how long, and develop auditable proc- 
esses” to ensure that data is protected. 

New technologies such as ultra- 
dense optical and relatively low-cost, 
high-performance Serial ATA-based 
disk drives can be used to create multi- | 
ple tiers of storage, says Gerr. These 
technologies, along with policy-based 
storage management tools, allow cus- 
tomers to “tier applications and stor- 
age infrastructure by type, value, per- 
formance, availability needs or other 
meaningful criteria,” he says. 

“Fibre Channel or SCSI [storage] 
might be Tier 1,” says Gerr. “Serial 
ATA-based storage could be Tier 2; 
tape might be Tier 3.” Each successive 
tier will consist of less-expensive, but 
slower, storage that allows companies 
to move data to different storage levels 
as their importance changes over time. 

To comply with Sarbanes-Oxley and 
other regulations, Gerr says, a company 
might need to be able to retrieve finan- 
cial statements very quickly in the first 
30 days after the end of the quarter and 
thus keep that data on the first tier. 

“After the first 30 days, you may need 
to keep them online until the quarter 
ends, but since you don’t need to access 
them regularly, you may want to move 
them” to Tier 2 storage, says Gerr. After 
the end of the quarter, when the need for 
quick retrieval of the data becomes even 
less likely, the company might want to 
move those records to lower-cost but 
slower-performing tape in Tier 3. 

Gartner Inc. analysts Debra Logan 
and Rich Mogull argue that the first 
priority for storage or IT managers 
should be understanding which appli- 
cations and which technologies are 
most critical to the law’s goal of “im- 
proving transparency and accountabil- 
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ity in business processes and corpo- 
rate accounting.” 

“The only technology category that 
the law mentions specifically is ‘elec- 
tronic communications,’ but we know 
that financial accounting systems, enter- 
prise resource planning, general ledger 
and supply chain management systems 
will all be subject to the regulation,” 
wrote Logan and Mogull in an October 
report. Since Sarbanes-Oxley is primari- 
ly concerned with corporate financial 
processes, they say, “CIOs should pay 
the closest attention to ERP and other 
financial management systems.” 


USER APPROACH: Tektronix Inc., a 
Beaverton, Ore.-based manufacturer 
of test, measuring and monitoring 
equipment, won’t need new hardware 
or software to comply with Sarbanes- 
Oxley, says IS director Callie Gates. 
The company already purchased a 
SAN as well as automated off-site 
tape backup and archiving software 
from OuterBay Technologies Inc. in 
Campbell, Calif., as part of an informa- 
tion life-cycle management plan be- 
gun in 1999. 

The strategy was spurred by a series 
of divestitures that forced Tektronix to 
reorganize how it handles information. 
While the changes Tektronix has al- 
ready made put it in good shape to 
comply with Sarbanes-Oxley, Gates 
says the law will force her company 
and others to formalize their proce- 
dures for safeguarding data. 

“Everyone has controls around this 
process, and the auditors document 
them at a high level,” she says. But pro- 
ducing a detailed list of those process- 
es “has never been a requirement for 
corporate America before,” says Gates. 

Gartner research conducted before 
Sarbanes-Oxley was enacted showed 
that while companies may have had 
adequate controls over paper records, 
their control of electronic documents 
was inadequate. 

Although good record-keeping proc- 
esses aren’t specifically mentioned 
in these acts, “the implications for 
records management are clear.” 


@ 42401 





Scheier is a Computerworld contribut- 
ing writer in Boylston, Mass. He can be 
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ICK ALLEN, service line 
director for IS opera- 
tions at Gwinnett 
Health System in 
Lawrenceville, Ga., 
manages just about 
every storage medium 
under the sun, from 
Fibre Channel networks to optical disk 
to tape libraries. But pressured by 
HIPAA regulations and seeking cost 
savings for his company, he’s working 
to consolidate and automate his 
records management process. 

“I’m trying to consolidate all that be- 
cause keeping up with it is making me 
pull my hair out,” says Allen. “[Consol- 
idation will] allow me to effectively 
manage storage allocations and data 
retention, and minimize the amount of 
data stored.” 

Regulatory compliance issues and 
business needs are challenging IT man- 
agers to reinvent their storage strategies 
and driving a move toward information 
life-cycle management (ILM), a nascent 
concept for managing data in a policy- 
driven, automated fashion from cradle 
to grave. ILM is an outgrowth of an 
older and more well-known concept, 
hierarchical storage management, the 
automated management of data, from 
file backup to archiving. 

The goal of ILM is to put certain 
types of data on appropriate types of 
storage devices and media depending 
on how long companies must keep it or 
how soon they might need to retrieve 
it. Another key component is automat- 
ed deletion of data when regulators no 
longer require it be saved. 

Today, however, ILM is still in its in- 
fancy — it’s a collection of disparate 





Regulatory compliance 
is driving a nascent concept called 
information life-cycle management 
for managing data from cradle 
to grave. By Lucas Mearian 
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management applications and hard- 
ware that combines policy-based stor- 
age management with online storage, 
nearline storage and archive tape stor- 
age. In a post-Enron world, companies 
are using these bits of technology to 
make sure thai data is stored in com- 
pliance with new laws and purged at 
the right times, and that records-reten- 
tion policies are enforced. 

The problem, as Gartner Inc. analyst 
Ray Paquet defines it, is that “today we 
have storage, period. Information is 
put on storage without any concept 
of its value.” On average, Paquet says, 
70% of all data on disk is untouched 
after 90 days. So when you consider 
how expensive high-end Fibre Channel 
storage devices are — anywhere from 
9 to 15 cents per megabyte — it makes 
sense for storage administrators to mi- 
grate data to less-expensive media as 
fast as possible. Serial Advanced Tech- 
nology Attachment (ATA) drives, for 
example, are one-tenth the cost of 
Fibre Channel drives, Paquet says. 

“That’s big dollars. And the data is 
still on disk, so it’s immediately acces- 
sible,” he says. 

Here’s a look at how four companies 
are using storage technology to meet 
regulatory requirements, while keep- 
ing costs down. 


A Call to Consolidate 


At Gwinnett Health System, storage 
administrators are dealing with the 
requirements of the Health Insurance 
Portability and Accountability Act, 
which mandates that radiology images 
and other records be saved for set peri- 
ods of time — in some cases, for the 
life of the patient. Physicians must also 
be able to easily and quickly access 
those records, which means they must 
remain online for years. 

To meet those demands, Gwinnett 
uses a mix of 130 servers (Dells and 
Hewlett-Packards) backed up by a 
storage-area network and direct-at- 
tached storage. Allen says his archival 
systems include optical disk and three 
tape library formats: Mammoth 2, lin- 
ear tape open and digital linear tape. 

The problem is, Gwinnett’s storage 
architecture, like that of many enter- 
prises, is made up of islands of capac- 
ity without any policy-driven system 
for migrating data between systems 

based on the importance of each 
document and how long it should 
remain on one form of media. 
“We're converting data off 
the WORM drives and onto the 
SAN,” Allen says. “HIPAA says 
we have to keep files for a mini- 
mum of seven years. Some of the 
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stuff we just can’t ever get rid of. 

“Patient safety is a big push. We’ve 
got to be able to provide our physi- 
cians with all the information they 
need to make good decisions. I’ve got 
to have some way to manage [that in- 
formation],” he adds. 


A Drive to Save Money 

For Bob Massengill, manager of techni- 
cal services at Wake Forest University 
Baptist Medical Center in Winston- 
Salem, N.C., ILM is less about regula- 
tions and more about cost. The Med- 
ical Center has 20 subsidiary or affili- 
ate hospitals and runs 87 satellite clin- 
ics throughout the region with about 
11,000 employees. 

“Everybody’s scrutinizing everything 
you spend now, so you'd better make 
sure everything you spend is invested 
at the right level,” Massengill says. 

Two years ago, Massengill set up a 
SAN powered by a refrigerator-size 
EMC Corp. Symmetrix storage array. 
The SAN worked well, says Massen- 
gill, but after about a year, he found he 
couldn’t justify saving everything from 
e-mail to old X-rays on disk that cost 
him up to 15 cents per megabyte. So 
earlier this year, to achieve lower total 
cost of ownership, Massengill installed 
a storage array based on cheaper ATA 
disks, also from EMC, and upgraded his 
Storage Technology Corp. enterprise- 
class PowderHorn tape library to in- 


Market 
Outlook 


@ IBM, Hewlett-Packard Co., EMC, 
Hitachi Data Systems Inc., Stor- 
ageTek and Sun Microsystems Inc. 
are key players in this market, as 
well as storage management soft- 
ware companies such as Veritas 
Software Corp. and Legato Sys- 
tems Inc. 


® Still missing from the storage 
automation equation is integration 
with front-end applications, such as 
Microsoft Exchange, Oracle and 
SAP. One example of how storage 
vendors are moving toward tying 
more tightly into front-end systems 
was EMC’s October announcement 
that it will acquire content manage- 
ment vendor Documentum Inc. ina 
$1.7 billion stock transaction. The 
acquisition is intended to give EMC 
a boost in its ability to manage un- 
structured content such as e-mail. 
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Putting the Pieces Together 


Companies that want a policy-driven automated storage architec- 
ture should start by building out a tiered infrastructure that includes 
high-end primary storage and nearline arrays based on ATA disk and 
tape libraries, says Gartner analyst Ray Paquet. 

Before automating any system, it's important to know what data 
is stored on it. Discovering and classifying data should be at the top 


of your list prior to installing ILM products. 


The next ingredient is management software that can dynamically 
and transparently move data between your tiers of storage. 

Any ILM strategy must begin at the creation of the data - from 
the Oracle databases, Excel spreadsheets, Microsoft Exchange 
servers and so on - and include policies specific to each. 

“I'm going to have different policy for my Excel spreadsheets than 


| will for my MP3 files,” Paquet says. 


Key to managing data by its content will be a new technology 


known as object-based storage. 


clude a virtual tape array or a disk ar- 
ray that mimics tape for faster backup. 

The medical center now has 45TB of 
capacity, but Massengill says he still 
performs data migration without the 
use of policy-based tools. “We’re using 
Legato’s software for backup. It’s not 
totally manual, but it’s not totally poli- 
cy-driven either. We have scripts that 
say when to dump data to tape.” 

Massengill says he now needs tools 
to help him classify data to decide 
whether and how long it should be on 
high-cost primary storage disk, near- 
line storage or a tape archival system. 

“I’m struggling with that. I guess the 
big thing that is missing is nobody has 
a clear-cut, true ILM product on the 
market today. I need to determine what 
kind of data it is and how often it’s 
been used,” he says. 

For example, Massengill says he’s 
working on setting up automated poli- 
cies for e-mail storage. That will free 
up primary disk storage space by mi- 


| grating less important data onto the 


correct medium, he says. 

Massengill says it will take him 
about 12 to 18 months to complete data 
analysis and policy development. 


Lock It and Back It Up 


More than a year after the Sarbanes- 
Oxley Act for corporate accountability 
was passed, the legal and IT depart- 
ments at Chicago-based Grant Thorn- 
ton LLP are still hammering out just 


| what data needs to be stored where 


and for how long. 

Dave Johnson, director of IT at the 
global accounting and auditing firm, 
says he has been meeting twice a month 
with the firm’s compliance department 
to work out storage requirements. The 
group evaluates data by line of business 





data to find the files. 


Typical network-attached storage uses either the NFS or the CIFS 
protocol to store metadata separately from a file on an array of 
disks. Each time a request is made, that file system uses the meta- 


Object-based storage, however, breaks a file or block-level data 
into random-size chunks called “objects,” which carry file data, 


metadata and other attributes, such as quality of service. Those ob- 


disk drive, has the ability to access those files directly. But to a user, 
it all looks like a basic file system with a directory tree. 

Each client server then receives an agent that allows it to directly 
seek out the data. The concept isn’t new; mainframe computers 
have performed ILM functionality for decades. 


But when it comes to storage, “you've got to put more of the 


and type of client in order to best ad- 
dress the legal guidelines, he says. 

Johnson is keenly aware that the Sar- 
banes-Oxley Act is requiring public ac- 
counting firms to retain documents 
from publicly traded companies for 
seven years, two years longer than pre- 
viously required. 

For now, Grant Thornton uses ser- 
vices from Connected Corp. in Framing- 
ham, Mass., to back up all desktop ap- 
plications and meet regulatory require- 
ments. Each time a user logs in, any file 
updates are automatically transmitted 
via virtual private network (VPN) to 
Connected, which “ensures we don’t 
have those files any more and the legal 
department is the only one that can get 
them,” Johnson says. 


Find the Right Technology 


Charles Bennett, vice president and 
director of compliance at Hornor, 
Townsend & Kent Inc., the brokerage 
division of Penn Mutual Life Insurance 
Co. in Horsham, Pa., sits on a regulatory 
compliance committee at his firm that 
includes IT management. The group is 
“constantly locking for ways to make 
the firm’s records retention operation 
more automated and efficient and at a 
better price point,” he says. 

“Clearly, one of the things I end up 
doing is giving [IT] people a sense of 
the importance of the ability to re- 
trieve data and how fast we need to do 
that,” says Bennett. “The [U.S. Securi- 
ties and Exchange Commission’s Rule 
17a-4] requires us to be able to retrieve 
any document within 24 hours.” 

The firm’s compliance committee 
evaluates whether data being stored 
on an IBM enterprise-class SAN 
should eventually be written off to 
tape or optical disk, which is one op- 
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pieces together,” Paquet says. 


~- Lucas Mearian 


tion for meeting the SEC’s requirement 
that all electronic documents be stored 


| on WORM technology. 


Bennett says the current process 
used to determine whether an elec- 
tronic document is regulated by the 
SEC is manual and arduous. Once a 
regulated document is identified, it 
must be off-loaded from the SAN to 
optical disk and then shipped to 
Boston-based Iron Mountain Inc. for 
off-site storage. The problem comes 
in retrieving that data, which can take 
days, Bennett says. 

“We struggle over the most appro- 
priate technology solutions for both 
the business’ need and risk,” he says. 
“If you’re addressing a regulatory 
request for documents, you sure don’t 
want to give someone a date range 
and have them paw through all your 
communications.” 

Bennett says he expects to purchase 
Iron Mountain’s e-mail surveillance 
service, which will allow his company 
to transfer all e-mails to an off-site 
storage facility via a VPN and then 
perform oversight via a Web browser 
equipped with content management 
software. “My staff today spends 
15% to 20% of their time reviewing 
e-mails,” he says. “We expect with this 
supervisory module that we'll cut 
down to 5%.” 

But, as Gartner’s Paquet points out, 
e-mail is only one piece to the docu- 
ment-retention equation. “I think ven- 
dors will start to glue the systems to- 
gether in the next year to 18 months,” 
he says. “The question is, When will it 
be completed? That’s at least three 
years out, if not five years out.” 

In the meantime, users will continue 
to cobble together their own solutions, 
piece by piece. @ 42242 
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Keeping a 
Sate Dis 


IP storage allows long-distance 


data replication and recovery, 
but the technology is emerging 
slowly. By Matt Hamblen 


URRICANE ISABEL and the fires that re- 
cently devastated Southern California 
have provided storage managers with 
more evidence that it’s a good idea to 
back up data to a second data center 
scores or even hundreds of miles away. 

To keep the costs of replication affordable, a hand- 
ful of banks and brokerages began testing long- 
distance IP replication for data recovery two years 
ago, and interest in the technology has grown among 
other types of businesses since then. 

Even though long-distance IP storage is now avail- 
able, some storage managers still resort to bulk repli- 
cation on tapes, which might be sent overnight to a re- 
mote site for safekeeping. But managers usually prefer 
keeping replicated data on storage disks for quicker 
recovery. “Recovery from tape is too laborious,” says 
Robert Gray, an analyst at market research firm IDC. 

A dedicated optical or copper connection between 
data centers could be used for replication but would 
be costly to lease from a carrier and prohibitively ex- 
pensive to build privately, Gray says. 

Users of IP for long-distance storage have found 
that a conventional Internet connection can be used 
for e-mail and other purposes during the day and as 


Distance 
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a replication highway at night or at other low-traffic 
times, Gray says. The only added cost is for a switch, 
available from several vendors, that converts data on 
the Fibre Channel storage protocol to IP using the 
Fibre Channel over IP (FCIP) protocol. The pipes 
between primary and secondary storage facilities 
can be fiber, copper or even wireless, depending on 
the distance. 

The use of IP in long-distance storage is really just 
starting, despite the deployments that were publi- 
cized two years ago, says Steve Duplessie, an analyst 
at Enterprise Storage Group Inc. in Milford, Mass. 
The 2003 market for switches and related gear to 
convert Fibre Channel to FCIP will be about $100 
million, with 90% of that total shared among McData 
Corp., Cisco Systems Inc. and Computer Network 
Technology Corp., he says. There are probably 500 
implementations of long-distance IP replication un- 
der way or up and running, Duplessie estimates. 


Close Calls 


Steinbach Credit Union in Steinbach, Manitoba, in 
January began setting up an IP-based data recovery 
center in Winnipeg, 35 miles away, says network ad- 
ministrator Denis Van Dale. 

The credit union, which has 35,000 customers, de- 
cided to spend $350,000 (Canadian) to do replication 
at a remote site in the summer of 2002 after two 
power outages during thunderstorms that left water 
in the basement of its offices, Van Dale says. 

“It could have been a disaster of major propor- 
tions,” with potential damage to the tape backup sys- 
tem, he says. When he learned that a branch office 
was opening in Winnepeg, it became the logical 
choice for replication. The backup center was ulti- 
mately reached via wireless IP, using high-speed ra- 
dios at each end and a transmission tower midway 
between the two sites. 

The project provides real-time backup of all data 
in addition to disaster recovery. The wireless Ether- 
net connection has saved the credit union about 
$50,000 (Canadian) per month compared with a 
wired connection, and there are administrative sav- 
ings as well, so the return on investment will be 
reached in about a year, Van Dale says. 

Steinbach uses IP switches from Nishan Systems 
Inc. (which was purchased by McData in Septem- 
ber), clustered storage gear from Xiotech Corp. and 
radios from Proxim Corp., Van Dale says. 

Taking a different approach, the Cancer Therapy 
& Research Center in San Antonio 18 months ago 
began replicating data over IP to a research facility 
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22 miles away, in another part of San Antonio, via an 
optical connection. 

The research center setup uses Cisco storage rout- 
ers that connect to a storage-area network using Fibre 
Channel Clariion disk arrays from EMC Corp., accord- 
ing to Chief Technology Officer Mike Luter. The opti- 
cal connection had been used for IP telephony and 
data applications before the replication began, he says. 

Luter says that “the ROI is not really in dollars but 
in patient care,” which is enhanced because there is 
very little delay if a server fails — perhaps only 10 
minutes, compared with hours before the data recov- 
ery project was completed. “We’re able now to en- 
sure we don’t interrupt treatment,” he says. 

Some companies have ambitious plans for the tech- 
nology. For example, Sprint Corp. in July announced 
a prototype of a storage network over FCIP from 
Overland Park, Kan., to Burlingame, Calif., and back 
to Overland Park, a total of 3,600 miles. The pilot 
used Hitachi Data Systems Corp. storage and Cisco 
SAN switches and was designed to show that Sprint 
could offer such a service to customers at “much less 
cost than running dedicated, single-purpose fiber,” 
says Ray Dickensheets, a member of Sprint’s techni- 
cal staff. The network won't be limited to fiber-optic 
cable and could run over copper circuits, he says. 

“All these efforts are aimed at getting replication 
outside a metro area,” says Dickensheets. @ 42292 


How Far Is 
Far Enough? 


To design an effective IP-based data recovery sys- 
tem, Steve Duplessie, an analyst at Enterprise Stor- 
age Group, recommends that a secondary site be 
more than 100 miles from the primary data center. 
“We'd prefer 1,000 miles, because bad stuff hap- 
pens,” Duplessie adds. 

Since Sept. 11, 2001, the government has sent 
mixed signals about data recovery. In a 2002 
interagency white paper, the Federal Reserve, the 
Office of the Comptroller of the Currency and the 
U.S. Securities and Exchange Commission rec- 
ommended a 200-to-300-mile separation be- 
tween primary and backup data centers. But in 
guidelines for financial institutions issued in April, 
the agencies didn’t recommended a minimum 
distance, instead urging companies to make pro- 
visions for the recovery of operations within a 
business day, with the “goal of achieving recovery 
and resumption within two hours after an event.” 

A 35-mile separation works for Steinbach Cred- 
it Union in Manitoba, says network administrator 
Denis Van Dale. “We have no hurricanes here, 
only storms and fires, and no terrorist attacks - 
yet,” he says. 

Dan Huberty is director of IT at Minneapolis- 
based Carlson Companies Inc., which is develop- 
ing storage virtualization and long-distance IP be- 
tween its data centers. He says he feels that 60 
miles is enough, given a study showing that weath- 
er events, including hurricanes, aren't likely to 
reach much farther than that in their impact. 

~ Matt Hamblen 





WHEN YOU NEED POWER PROTECTION 


a 


Backed by an 80-year history of trusted reliability, Tripp Lite offers over 1,000 high-quality 
power protection solutions for protecting your valuable equipment against all power problems, 
including prolonged blackouts. Tripp Lite products provide a full range of premium features 
that allow you to customize your protection solution to suit your specific needs. Best of all, 
Tripp Lite products are typically priced lower than comparable competitive models! 





UPS Systems 


Protect Datacenters & 
Mission-Critical Equipment 


True on-line operation with pure sine wave output for the highest 
level of protection available. Models available from 1kVA — 10kVA. 


Protect Workstations & Servers 


Intelligent power management and control with automatic voltage 
regulation. Models available from 450VA — 5,000VA. 


Automatic voltage regulation provides constant, 120V computer-grade 
power. Models available from 300VA — 1400VA. 


Protect PCs & All Peripherals 


All-in-one units offer battery backup, surge suppression and telephone/DSL line 
surge protection. Models available from 300VA — 750VA. 


Excellent basic battery backup and surge suppression. Models available from 
300VA — 1400VA. 


Surge Suppressors 
AC, tel/modem, Ethernet and coaxial 2 Great Products 


protection with the highest UL-verified : 
joule ratings; includes #1-selling at One Low Price! 


Isobar® series. : Get Tripp Lite's popular surge 
a suppressor/mini-hub bundle 

Cables & Connectivity Products | ata special low price! 

Over 400 solutions available including Limited time offer! Visit: 

USB/FireWire®, PC/Mac, Caté/Cat5e, www.tripplite.com/promo/cw 

network, SCSI cables and KVM for details. 


switches. | ~ e : ey We) = iSO 








44 COMPUTERWORLD November 17, 2003 


SNAPSHOTS 


Market Interest 


Are you interested in buying 
iSCSI products in the future? 


DON'T 
KNOW 
11% 


BASE: 292 IT storage managers at 
companies with more than 40 employees 


MBEF 


In Tandem 


In the next year, many IT managers plan 
to undertake storage and server virtual- 
ization projects at the same time. 


virtualization 
only: 38% 


BASE: 185 North American IT managers 
who plan to undertake a virtualization 
project in the next 12 months 


Vertical Storage 


The five industries that will spend the 
most on storage services in 2004: 


Government: 
$1.6 BILLION 


Services 
$1.5 BILLION 


Bankin 


Discrete manufacturing 
Scher time) 0) 


Communications/media 
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MARK HALL 


Unpleasant 
Success 


HE SURLY IRISH PLAYWRIGHT George Bernard Shaw once observed, 

“It’s just as unpleasant to get more than you bargain for as to get less.” 

He must have been thinking about mass storage systems. 

At all levels — disk, array, NAS and SAN — data storage devices are expand- 

ing their capacities faster than most of us can keep pace. Today, business 
laptops from Dell come equipped with 40GB drives as standard. In 1999, the 
regular configuration averaged 4.8GB. Since 1990, disk drive storage capacities 
have outpaced Moore’s Law, doubling every year instead of the 18 months that it 
takes for chips. Currently, IBM’s researchers have pegged 20TB as today’s theoretical 
limit of a single drive’s storage limits. But many others, as noted below, believe that 


goal will easily be smashed. 


Prices are tumbling, too. According to American Sci- | 


solution. Happily, 64-bit operating systems and chip 


entist, “At a few tenths of a cent per megabyte,” digital | sets will become more widespread in the coming 
data storage has become much cheaper than paper asa | years, giving us headroom for cache expansion beyond 


medium on which to create and hold information. 

So cheap, in fact, that it’s likely more of us will fol- 
low Microsoft researcher Gordon Bell’s lead by cram- 
ming our entire lives — everything from 
the books we read to every e-mail we send 
or receive — onto a single, portable disk 
drive. He estimates in his MyLifeBits proj- 
ect that a person’s life that was filmed 24 
hours a day for 100 years could slip into a 
single 1OOTB drive, which is something he 
and others believe we have “every prospect 
of reaching.” 

Although I’m certain Bell’s life is worth 
chronicling, most of you will be storing cor- 
porate, not personal, histories in enormous 
detail, not only because it’s possible and 
cheap, but also because the government 
mandates that you save more and more 
company data. Uncle Sam also wants you to access it 
on demand. But that could be a problem. 

Setting aside the database and data management is- 
sues for dealing with the humongous data stores we'll 
face, consider the simple matter of physical access to 
the stored data. According to Jim Gray, another noted 
Microsoft researcher, while drive capacity has been 
doubling for nearly 15 years, physical access rates have 
improved by a mere 10% annually during the same 
period. As a result, I/O is once again becoming a bot- 
tleneck for application rollouts that depend on using 
larger and larger data stores. 

Luckily, you can design your systems to bridge the 
gap until access times catch up to the data stored, as- 
suming it’s even possible. One way is to use more 
memory in application servers that are retrieving data 
from these massive, but lollygagging, drives. RAM is 
relatively cheap, so in many cases it will be the right 
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the 32-bit system limits most of us experience today. 

This approach also lets companies run big iron that 
can continue to serve lots of users with vital applica- 
tions. It makes for a more secure comput- 
ing environment and a data center that’s 
easier and less costly to manage. 

You could also solve your I/O logjam by 
distributing today’s centrally managed ap- 
plications farther to the edge of your net- 
work or even down to the desktops them- 
selves, probably via Web services. This 
technique improves performance because 
data reads and occasional writes are hap- 
pening closer to users, sometimes literally 
on their laps. However, it also involves 
more complex security, data management 
and replication issues. 

Endless storage capacity coupled with 
finite access also wreaks havoc with backup and reten- 
tion. To fix the chaos, in the not-too-distant future 
you'll switch from removable storage to real-time disk- 
to-disk backups. Instead of sending boxes of tapes to 
off-site storage sites, you'll send small, prepackaged 
and inexpensive fixed-disk appliances. 

The real problem, of course, will be predicting when 
and where on your network those problems will crop 
up. Anything to do with multimedia is clearly a poten- 
tial trouble spot. It takes 1 million IMB documents to 
consume ITB of storage, but only 290 hours of 
1.S5Mbit/sec. streaming video. 

And once you determine which applications need 
special attention to bypass the I/O bottleneck, you'll 
have to figure out which approach is best to solve it. 

It’s generally pleasant to have all that capacity, albeit 
on relatively slow disks. But as Shaw said, getting more 
than you bargain for has its downside as well. @ 42128 
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_ 1800 
Contacts Inc. 


Replaced direct- 
attached server storage with iSCSI 
SAN for its SQL Server databases. 


The iSCSI SAN used 
existing Ethernet hardware, 
saving $50,000 over a 
Fibre Channel SAN alternative. 


Early adopters 
of storage-area 
networks based 
on the Internet 
SCSI protocol 
say that so far, 
cost savings 
outweigh 
performance 
concerns. By 
Lucas Mearian 
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uses iSCSI over 1-800 Contacts’ existing Ethernet to cut costs. 


Users 
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TORAGE-AREA net- 
works that use the 
Internet SCSI proto- 
col are gaining accep- 
tance with corporate 
IT as a supplement 
to — or a complete 
replacement for — 
Fibre Channel SANs. 

Products supporting the new iSCSI 
protocol issue SCSI commands and 
transfer block data over existing IP 
networks, allowing administrators to 
move storage networks onto existing 
Ethernet LAN infrastructures or new 
Ethernet subnetworks instead of build- 
ing and maintaining a separate Fibre 
Channel network. 

With iSCSI, there’s no need for high- 
ly paid Fibre Channel specialists or ex- 
pensive Fibre Channel switches, host 
bus adapters and cabling. And with IP 
SANs, existing Ethernet networks can 
be used to back up servers as well. For 
example, Microsoft Corp. has released 
a software driver that supports iSCSI- 
based backups of Windows systems. 

With Gigabit Ethernet switches and 
high-performance processors, iSCSI is 
a viable option for midrange system 
applications as well as departmental or 
remote office backups, says Ahmad Za- 
mer, interim chairman of the IP Stor- 
age Forum at the Storage Networking 
Industry Association in San Francisco. 

Zamer points to cost as a major fac- 
tor in iSCSI adoption decisions. A Fi- 
bre Channel switch can cost $500 to 
$2,000 per port vs. $125 to $150 for Gi- 
gabit Ethernet, and Fibre Channel host 
bus adapters cost twice as much on av- 
erage as IP network adapters, he says. 


User Experiences 
Computerworld spoke with three early 
adopters who have begun testing iSCSI 


SANs. While some problems have 


Continued on page 50 
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Continued from page 48 

arisen, these users say they’ve been 
satisfied with both the price and the 
performance of the technology. 

Adrian Porter, senior database ad- 
ministrator at 1-800 Contacts Inc. in 
Draper, Utah, was using direct-at- 
tached storage to back up five Hewlett- 
Packard Co. dual-processor ProLiant 
servers running SQL Server databases. 
But the system was exceeding storage 
capacity every six months, and per- 
forming data migrations with every 
storage upgrade was costly. 

Initially, Porter decided to shop for a 
Fibre Channel SAN. Because he already 
had ProLiant servers, Porter first test- 
ed HP’s Fibre Channel-based Enter- 
prise Virtual Array, bringing a server 
and a copy of one of his databases to 
HP’s test facility in Colorado Springs. 
“We couldn’t even get the same perfor- 
mance we were seeing on direct-at- 
tached storage,” Porter says. But the 
problem wasn’t just with HP’s offering. 
“We did the same tests with EMC and 
got the same results,” he adds. 

Porter had considered using a net- 
work-attached storage appliance in- 
stead of a SAN, but that option didn’t 
provide enough performance either. 
Unlike SANs, NAS devices route data 
through an intermediate server file 
system and transport the data in files 
rather than using more efficient block 
data transfers. 

“From what our engineer saw local- 
ly, apparently if you get over a 30GB 
database, you start seeing degradation 
in performance,” he says. 

In April, Porter settled on an IP SAN 
that included a Network Appliance 
Inc. fabric-attached storage (FAS) ar- 
ray and a NearStore nearline storage 
appliance. 

While testing a traditional NAS 
appliance, “we were maxing out at 
45MB/sec. throughput,” says Porter. 
“With iSCSI, we’re seeing bursts of 
llOMB/sec. [when performing data 
snapshots and replication].” 

Porter says one reason for choosing 
iSCSI was that he could avoid spend- 
ing $50,000 on a Fibre Channel switch. 
“We were able to leverage the same ex- 
isting infrastructure we had with Giga- 
bit Ethernet,” he says. 

Porter’s IP SAN consists of a Cisco 
Catalyst 4500 Gigabit Ethernet switch, 
Intel Corp.’s Pro/1000 T IP Storage 
Adapter (a Gigabit Ethernet device) 
and NetApp’s FAS940, a storage sys- 
tem that supports Fibre Channel disks 
internally but presents a Gigabit Ether- 
net and iSCSI interface to the network. 

While Porter says throughput has 
been more than adequate, errors with 
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the Intel host adapter cards have re- 
sulted in servers losing their mappings 
to target storage devices. Porter is now 
considering using Microsoft’s iSCSI 
driver and a standard Intel Gigabit Eth- 
ernet network adapter. 

Porter says he was able to get 16TB 
of capacity out of his IP SAN vs. the 
3TB to 5TB he could have afforded 
with a Fibre Channel SAN. “And we 


| were able to use the networks we al- 


ready had in place,” Porter says. 

Maintenance also has been easier. 
“Administering this from one central 
location has taken half as much time 
[as with Fibre Channel]. It allows me 
to focus on the database rather than on 
the hardware,” he says. 


PBS Takes SAN Supplement 


Ken Walters, senior director of enter- 
prise platforms for the Public Broad- 
casting Service in Alexandria, Va., has 
had a Fibre Channel SAN based on 
IBM storage servers for three years. He 
was satisfied with attaching all of his 
mission-critical servers to the SAN, 
which he uses as a high-speed backup 


| network. But some 100 blade servers 


used for development work were still 
using direct-attached storage because 
he couldn’t justify the cost of addition- 
al Fibre Channel switches and host bus 
adapter cards for them. 

About a year ago, Walters estimated 
that each Fibre Channel switch would 
cost about $25,000 and a Fibre Channel 
network adapter card for each server 
was about $1,000. 

An IP SAN using iSCSI devices 
seemed the perfect way to connect 
those “stranded” servers, and the IP 
network had a lot of spare bandwidth, 
Walters says. “At peak hours it’s all 
used, but at off-peak I have a lot of ex- 
cess,” he says, noting that his TV net- 
work distributes video streams to 177 
member stations via satellite. 


Public 
Broadcasting 
Service 
PROJECT: Expand SAN cost 
effectively to include development 


department blade servers without 
sacrificing performance. 


PAYOFF: The iSCSI SAN cost less 
than Fibre Channel. Performance 
was adequate and met video 
streaming requirements without 
the installation of expensive TCP 
offload engine network adapters 
on the blade servers. 





Walters considered Cisco Systems 
Inc.’s MDS 9216 switch with an iSCSI 
blade but chose San Diego-based 
Stonefly Networks Inc.’s i2000 Storage 
Concentrator router because of its 
ability to pool capacity from many 
storage arrays and dynamically provi- 
sion it on the fly. The price was also 
right. 

“Because iSCSI was pretty new, I 
didn’t want to have to go to my boss 
and ask for a lot of money and have it 
not work out,” Walters says. The 
Stonefly product was under $10,000 
while the Cisco switch was $48,000. “I 
could slide [the Stonefly product] un- 
der the radar,” he adds. 

Walters spent about three months 
load-testing the iSCSI network using 
IBM BladeCenter blade servers, Red 
Hat Inc.’s Linux, Windows 2000 and 
Iometer, an open-source tool for mea- 
suring network traffic on single and 
clustered storage subsystems. 

Walters chose Microsoft’s iSCSI ini- 
tiator, but because he had heard that 
the processing of TCP/IP and iSCSI 
protocols can use up to 90% of CPU 
cycles on servers, he tested both stan- 
dard network adapters and models 
with special TCP/IP offload engines 
(ToE) from Alacritech Inc. in San Jose 
and Intel. 

The ToE adapters, 
which offload TCP/IP 
processing overhead 
from the host to an on- 
board processor on the 
adapter, worked flaw- 
lessly, Walters says. But 
the more expensive ToE 
devices were unnecessary because his 
low-end servers never pushed more 
than 14MBésec. through the IP net- 
work. He opted for standard network 
interface cards at $100 each instead of 
paying up to $1,000 for ToE adapters. 

“If you’ve got a Xeon processor and 
you're not CPU-bound, you probably 
don’t need to worry about a ToE card,” 
he says. “I could push about 5SOMB/Sec. 
out through the [iSCSI] adapter cards, 
but I can’t think of many applications 
I’d be running that would push that 
much out.” 


A Good Enough Performer 
Shawn Eveleigh, a senior systems 
administrator at Oakville, Ontario- 
based Zenon Environmental Inc., has 
used an EMC Corp. Clariion storage 
array for two years to back up more 
than a dozen Dell Inc. and HP servers. 
The servers, which support more than 
500 users at the developer of mem- 
brane technologies for drinking water 
purification and wastewater treatment, 
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Adoption of the iSCSI protocol will 
enable IP-based storage-area 
networks that will challenge Fibre 
Channel for dominance: 
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se Zenon 
Environmental Inc. 


PROJECT: Switch from Fibre 
Channel to IP SAN to lower 
maintenance and expansion costs. 


PAYOFF: iSCSI network storage 
was more cost effective and 
performed adequately for e-mail, 
document management and ERP 
application servers. 


run Microsoft Exchange, Windows 
Server, the LiveLink document man- 
agement system from Open Text Corp. 
in Waterloo, Ontario, and Zenon’s ERP 
system. 

With his maintenance contract com- 
ing to an end, Eveleigh began looking 
into the total cost of ownership of both 
maintaining his Fibre Channel SAN 
and upgrading it to accommodate 
growth. He concluded that the mainte- 
nance contract and expansion costs 
would have been more than what it 
would cost to deploy a new IP SAN. 

Last August, Zenon chose PeerStor- 
age, a native iSCSI storage array from 
EqualLogic Inc. in Nashua, N.H. 

“T don’t have e-com- 
merce applications or 
high-transaction data- 
bases, so I can only at- 
test to how iSCSI per- 
forms in a medium-size 
environment. And in 
that case, it does the job. 
I’ve done jet stress tests 
with Exchange 2003 and very large 
database files, and I can’t seem to hit 
its limits,” he says. Eveleigh says in 
testing the array, he was able to get up 
to 40MB/Sec. throughput. 

He was also able to minimize the 
downside risk by negotiating with the 
vendor. “I even got them to do a mon- 
ey-back guarantee,” Eveleigh says. 
EqualLogic agreed to take back the 
equipment and issue a full refund if af- 
ter 30 days Eveleigh couldn’t get it to 
work adequately. “That alleviated our 
risks,” he says. 

Eveleigh says the SAN installation 
was almost a turnkey operation. Once 
the physical network connections were 
plugged in, he spent about a half-hour 
configuring the proper IP addresses 
and another 10 minutes or so setting 


| up storage volumes. 


“The bottom line is, as long as the 
[host] servers see the storage and can 
do that at performance levels that keep 
up at a reasonable cost, that’s all I 
need,” he says. @ 42199 








ON SEPTEMBER STH: STEVE HABER HAD 
HIS BUSINESS TAKEN FROM HIM. 
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. 7 It could have been a tragic story 
Fortunately, Steve's critical financial data was backed up by 
ao a Network Attached Storage solution from Snap Appliance 
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Snap Appliance 


Once again, data is undergoing radical changes. But this time, it’s not only about what gets 
created, it’s where and how it is protected. Whether it’s an individual, workgroup, department 
or enterprise, you can back up every last digital bit on Snap storage and file server solutions. 
Easy to implement, easy to install and easy to manage. In fact, one out of every two Network 
Attached Storage installations in the world and over half of the Fortune 500 rely on Snap 
servers to protect their critical information. 1-888-343-SNAP. www.snapappliance.com 
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The Almanac 


Aneclectic collection of research 
and resources. By Mitch Betts 


World’s Tiniest Drive 

Holds 4GB of Data 

Hitachi Ltd. has unveiled a 4GB ver- 
sion of its Microdrive miniature hard 
disk drive, which is expected to sell for 
about $500. The company says it’s the 
world’s smallest hard drive, weighing 
just over half an ounce (16 grams) and 
equivalent in size to a matchbook. 

The Microdrive competes with 4GB 
Compact Flash memory cards, which 
allow for faster data access and lower 
power consumption but cost at least 
twice as much as the Microdrive. Both 
use the FAT32 file system, because the 
FAT16 system has a limit of 2GB. 

Microdrive technology was original- 
ly developed by IBM but was acquired 
by Hitachi when it bought IBM’s hard 
disk drive business [QuickLinks 35383 
and 2905]]. 

— Martyn Williams, IDG News Service 


Lessons Learned From 
The 9/11 Data Crisis 


For two weeks after the 9/1] terrorist 
attacks, consultants at Acquis Consult- 
ing Group LLC couldn’t get into their 
New York offices because of concerns 
about the structural integrity of their 
building and nearby buildings, a block 
away from the World Trade Center. 

As a result, the firm’s staff was un- 
able to access critical business data on 


laptop PCs inside the offices, says Ran- | 


dall Kane, chief operating officer and 
founding partner. And there was no 
formal, mandatory backup procedure 
— many consultants hadn’t backed up 
data in over a month — which “left us 


| consulting firm embarked on a serious 





blatantly unprepared,” he says. 
After returning to its offices, the 


search for a system that would provide 
mandatory backup for its often-travel- 
ing consultants. 

Acquis picked an online backup 
service from Connected Corp. in Fram- 
ingham, Mass., and Kane says he has 
been very happy with the service. 
Now, when a consultant’s laptop crash- 
es, a disk image can be downloaded to 
a new laptop, for example. 

Best of all, Kane says, backup has be- 
come unavoidable. Users can defer the 
online backup routine two times if it’s 
inconvenient, but the next time the 
laptop goes online, the Connected 
backup process begins automatically. 


Patent Watch 


® An expandable, modular, hard-disk sys- 
tem. Upgrading PC storage capacity of- 
ten requires installing an external hard 





THE U.S. DEPARTMENT of Homeland 


drive or replacing the internal hard 
drive and upgrading the power supply 
to match. This invention calls for a 
stack of interconnected hard-disk 
modules with self-contained power 
supplies. Adding capacity would mean 
plugging another storage device into 
the stack. 

As an added bonus, if there are three 
hard drives, data can be stored on two 
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‘ The role of tape will 
start diminishing, 
but IT departments won't 
feel comfortable with the 
smaller role for at least 

24 months. 


ARUN TANEJA, FOUNDER AND CONSULTING 
ANALYST, TANEJA GROUP, HOPKINTON, MASS. 


of the drives, and parity-checking in- 
formation for that data can be stored 
on the third drive. If any one of the 
disk drives fails to operate, all of the 
data can be restored by accessing the 
remaining two drives. — U.S. Patent 
No. 6,640,235, issued Oct. 28. 

Inventor: Michael H. Andersen, for 
Intel Corp. 

@ Controlling the disk-drive rotation to re- 
duce noise and vibration. The on-screen 
user interface (which looks like a vol- 
ume-control slider) is able to alter the 
speed of the spinning CD-ROM to pro- 
vide a sufficient rate of data exchange 
while also reducing the objectionable 
noise and vibration. — U.S. Patent No. 
6,639,883, issued Oct. 28. 

inventor: Vladimir Knyazhitsky, for Data 
Stream Info Inc., New York @ 42524 


MORE RESOURCES 


Our Storage Knowledge Center has research links 
from around the Web: 


QuickLink k1700 
www.computerworld.com 





store and transmit all of the biometric 


5 Petabytes of Biometric Data 


Security is gearing up to install a huge 
biometric border-control system to 
check the identities and visas of the 
500 million foreigners who enter the 
U.S. each year. Each visitor will be 
checked against lists of people with ter- 
rorist connections, criminal convictions 
or visa violations [QuickLink 38598]. 
The first phase begins Jan. 5 with 
fingerprinting and photo equipment at 
115 airports and 14 seaports. In the next 
few years, the system is expected to 


cover all air, sea and land ports of entry. 


It will add other types of biometric iden- 
tification, such as facial recognition or 
iris scans, as the technologies mature. 
The U.S. General Accounting Office 
has called the massive IT project “a 
very risky endeavor.” And one of the 
challenges will be figuring out how to 


GETTY IMAGES 


data collected, says Katherine Goodier, 
technical director of business develop- 
ment at WamNet Government Services 
Inc. in Herndon, Va. 

Goodier estimates that the full- 
fledged system will collect about 5 
petabytes of data per year and will need 
ultrafast database and networking tech- 
nologies to make sure there aren’t long 
delays for travelers. “It will require 
things that don’t exist today,” she says. 

“There’s been a lot of discussion 
about the front-end biometrics, but little 
discussion of the back-end storage 
challenges,” Goodier says. The data- 
transfer challenge is especially great at 
the remote U.S./Mexico border cross- 
ings, where IT infrastructure is poor and 
may require wireless access, she adds. 

~- Mitch Betts 
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TO WORK IN IT 2004 


If your IT department offers 
great benefits, competitive 
salaries, opportunities for 
training and advancement, 
and access to interesting proj- 
ects, then get your company 
recognized! Computerworld 

is conducting its Tith Annual 
Best Places to Work in IT 
survey, and we need your help. 
Our special report will honor 
the top 100 companies that 
offer their IT staffs a challeng- 
ing and satisfying work 
environment. 

THE WINNING COMPANIES WILL BE 
ANNOUNCED IN THE JUNE 14, 2004, 
ISSUE OF COMPUTERWORLD. 


To nominate your company, go to www.computerworld.com/bpnominations. 
The deadline for all nominations is Wednesday, December 31, 2003, at 5 p.m. EDT. 


For more information, go to www.computerworld.com/services/research/bestplaces 
or send e-mail to bestplaces@computerworld.com. 
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Serial vs. 
Parallel Storage 


DEFINITION 


Getting data to a storage medium requires 
transmission. Parallel transmission has historically 
been the preferred way to write data to disk. 
But at current speeds, serial transmission can 

be faster and offers other advantages. 


BY RUSSELL KAY 
ATA STORED on disk 
is made up of long 
strings (called tracks 
and sectors) of ones 
and zeroes. Disk 
heads read these 
strings one bit at a 
time until the drive ac- 
cumulates the desired 
quantity of data and 
then sends it to the 
processor, memory or 
other storage devices. How 
the drive sends that data af- 
fects overall performance. 

Years ago, all data sent to 
and from disks traveled in ser- 
ial form — one bit was sent 
right after another, using just a 
single channel or wire. 

With integrated circuits, 
however, it became feasible 
and cheap to put multiple de- 
vices on a single piece of sili- 
con, and the parallel interface 
was born. Typically, it used 
eight channels for transmis- 
sion, allowing eight bits (one 
byte) to be sent simultaneous- 
ly, which was faster than 
straight serial connections. 
The standard parallel inter- 
face used a bulky and expen- 
sive 36-wire cable. 

So why are vendors drop- 
ping parallel interfaces in fa- 
vor of serial ones, when we 
need to get data to and from 
disks faster than ever? 

For example, most printers 
don’t even come with parallel 
ports anymore. Laptops have 


VICK ¢ 
UDY™ 


ee 


| dropped traditional parallel 
and serial ports in favor of 
higher-speed Universal Serial 
| Bus and IEEE 1394 ports. [See 
| QuickLink 29332 for more 
| about these technolo- 
gies.] We now see this 
same migration in the 
interfaces that con- 
nect disk drives. 

At first glance, this 
seems counterintu- 


| itive. Isn’t parallel more effi- 


cient than serial, with more 
capacity? Not really, and cer- 
tainly not anymore. At current 
speeds, parallel transmission 
has several disadvantages. 


Processing Overhead 
First, remember that data is 
stored and retrieved one track 
at a time, one bit at a time. We 


| talk about bytes for conve- 


nience, but a byte is just a line 
of eight bits in a row, and ulti- 
mately, we have to process 
each bit separately. 

Thus, before we can send a 
byte in parallel to a disk drive, 


| we have to get those eight bits 
| and line them up, funneling 


each to a different wire. When 
we’ve done all the processing 
and moving to get them all 


| ready, we fire off that byte. 


At the other end of the ca- 
ble, when the drive receives 
the bits, it must go through 
the reverse process to convert 
that byte back into a serial bit 





stream so the disk drive write 





heads can write it to the disk. 
To visualize this another 
way, think about what’s almost 
precisely the reverse process 
— converting parallel to serial 
for transmission and back 
again. This is what happens in 
sending Morse code over a 
telegraph line. The message 
starts out as written words 
(think parallel) on a sheet of 
paper. A processor (i.e., the 
operator’s brain) has to con- 
vert each letter into a series of 
dots and dashes (serial) and 
then send these over the wire. 
At the receiving end, anoth- 
er processor has to listen to 
these serial dots and dashes, 
then convert them back into 
letters and words. A lot of 


| 








overhead is required because 
the transmission medium 
doesn’t match the original 
input or desired output. 


Signal Skewing 

As a signal travels over a wire 
or an integrated circuit trace, 
imperfections in the wires or 
integrated circuit-pad drivers 


| can slow down some bits. 


In a parallel connection, the 
eight bits that leave at the 
same time don’t arrive at the 
other end at the same time; 
some will get there later than 
others. This is called skew 
(see diagram below). To deal 
with this, the receiving end 
has to synchronize itself with 
the transmitter and must wait 
until all bits have arrived. The 
sequence of processing is this: 
read, wait, latch, wait for clock 
signal, transmit. 

The more wires there are 
and the longer the distance 
they span, the greater the 


| skew and the higher the delay. 
| This delay limits the effective 
| clock rate as well as the length 


and number of parallel lines 
that are feasible to use. 


Crosstalk 


| The fact that parallel wires are 


physically bundled means that 
one signal can sometimes “im- 
print” itself on the wire next 
to it (see diagram). As long 

as the signals are distinct, this 
doesn’t cause problems. 

But as bits get closer togeth- 
er, signal strength attenuates 
over distance (especially at 
higher frequencies), and spu- 


Crosstalk (right) occurs 
when the signal on one wire 
in a parallel bundle imprints 

itself on an adjacent wire. 
Skew (below) is the result of 
random imperfections in the 
wires and connections of 
the parellel bundle. 


Parallel bus 


ene 





rious reflections accumulate 
because of intermediate con- 
nectors. As a result, the possi- 
bility for error grows signifi- 
cantly, and the disk controller 
may not be able to differenti- 
ate between a one and a zero. 
Extra processing is needed to 
prevent that. 

Serial buses avoid this by 
modifying signals at the time 
of transmittal to compensate 
for such loss. In a serial topol- 
ogy, all the transmission paths 
are well controlled with mini- 
mum variability, which allows 
serial transmission to run reli- 
ably at significantly higher 
frequencies than parallel de- 
signs. 


The Newer, | 
Smaller Serials 


We've already seen serial con- 
nections displace parallel ones 
for printers and other periph- 
erals. Now, inside computers, 
we're replacing parallel con- 
nections to disk drives and ar- 
rays, both SCSI and Advanced 
Technology Attachment 
(ATA), with a new serial ar- 
chitecture called Serial At- 
tached SCSI and Serial ATA 
{QuickLink 36976]. 

Instead of parallel’s large 
connectors and wide ribbon 
cables that can block airflow 
inside a PC, small serial wires 
comparable in size to tele- 
phone cords, along with a new 
power connector that puts 15 
pins into the space of the old- 
er device's four, will both un- 
clutter and cool off the interi- 
or of the computer. 

The Peripheral Component 
Interconnect bus that con- 
nects other devices inside the 
case is being replaced with a 
serial interface called PCI Ex- 
press [QuickLink 39690]. 

Other storage-related serial 
system interfaces include Seri- 
al RapidIO, InfiniBand and 
Fibre Channel. @ 42560 


Kay is a Computerworld con- 
tributing writer in Worcester, 
Mass. You can reach him at 
russkay@charter.net. 

Are there technologies or issues you'd like 


to learn about in QuickStudy? Send your 
ideas to quickstudy@computerworld.com 


To find a complete archive of our 
QuickStudies, go online to 
@ computerworld.com/quickstudies 





1. Instantly admitting patient. 
2. Immediately processing claim. 
3. Automatically approving procedure. 


4. Constantly tracking treatment. 
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5. Directly assessing costs. @ business on demand" Go 
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Massachusetts requires 
its hospitals to store pa- 
tients’ medical records for 30 years. That’s 


no small feat for CareGroup Health Systems, 


a network of six hospitals that’s associated 
with Harvard Medical School in Boston. To 
meet that requirement, it currently stores 
70TB of patient medical data. 

But CIO John Halamka expects to double 
storage capacity to 140TB by 2004 to accom- 


modate what he calculates will be needed to | 


meet the storage and security requirements 
of the Health Insurance Portability and 
Accountability Act (HIPAA), as well as the 
financial data storage requirements estab- 
lished by the Sarbanes-Oxley Act. 

To handle the onslaught of data, Halamka 
in March hired a storage manager, a newly 
created position responsible for strategic 
planning for CareGroup’s skyrocketing stor- 


age needs, including three classes of storage | 


retrieval services. 

“The only way that you can deal with the 
overwhelming growth of the storage require- 
ments is to have a very thoughtful strategic 
plan for how to build centralized storage,” 
Halamka says. 

Many CIOs agree. In the face of mind- 
numbing storage requirements brought on 
by new legislation, some IT departments are 
realigning and retraining employees to han- 
dle risk management, adhere to business 
rules and ensure privacy. 

Sixty-five percent of the more than 100 
companies polled by Meta Group Inc. in 
August 2003 claim to be actively involved in 
projects to meet Sarbanes-Oxley compliance 
requirements. Another 25% of the respon- 
dents said they’re planning to initiate such 
projects in the near term. And nearly all 
health-related fields are feeling the pinch of 
HIPAA storage requirements. 

But despite the work ahead for IT depart- 
ments, the size of IT staffs and the cost of 
storage, budgets remain flat. As a result, 
hardware at the end of its life cycle is being 
replaced with higher-density storage and 
smarter storage technology that requires 
less maintenance. 


Restructuring the IT Department 
Blue Cross and Blue Shield of Minnesota in 
Egan was ahead of the game when HIPAA 
and Sarbanes-Oxley compliance became a 
top priority. Already offering its customers 
secure Internet access to claims information, 
the $5 billion health insurance provider was 
well on its way to compliance with HIPAA, 
which mandates that records be available to 
customers and that confidentiality be pro- 
tected. 

But complexities in the federal law’s 
requirements, such as one mandating that 
sensitive medical records of girls over the 
age of 12 be kept confidential from their 
parents, prompted CIO John Ounjian to 
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changing the jobs 


of storage aa 
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Compliance issues led CareGroup CIO 
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undertake a major restructuring of the IT 
department. 

“I have to bring privacy and security to 
individual household members. So within 
storage management, privacy and regula- 
tion make it quite complex,” he says. 

Nearly 150 IT staffers were retrained or 
realigned into new positions. “We needed 
more engineering types and more robust 
risk management-type people that under- 
stood security and controls,” Ounjian says. 

A handful of new IT employees were 
brought in, but the staff size remained the 
same because of attrition, he adds. IT costs 
also remained flat through the transition. 

Also, Ounjian appointed three senior- 
level advisers who report directly to him. 
One, a vice president in charge of transac- 
tion engines, makes sure business rules for 
compliance are being properly applied, 
documented and executed. “She needs to 
know storage management, where the data 
is coming from and how the output is be- 
ing managed,” Ounjian says. 

A second adviser, also a vice president, is 
in charge of technology and ensures that 
information flows quickly and securely. 
The third, a director, makes sure security, 
privacy, continuity, risk controls and pass- 
words are all in play when allowing access 
to data. So far, Ounjian says, the transition 
has been successful, because employees 
have been willing to change roles. 


What’s Next? 


Changing roles could become the norm for 
storage professionals. As storage systems 
become more intelligent and in some cases 
self-managing and self-healing, storage ad- 
ministrators will move away from manag- 
ing the systems and toward managing and 
protecting information, according to Peter 
Gerr, an analyst at The Enterprise Storage 
Group Inc. in Milford, Mass. 

“A lot of people I speak with are looking 
at [storage management] in terms of con- 
tent management, policy and procedure, 
rather than hands-on, highly technical stor- 
age administration,” Gerr explains. 

But in the short term, huge challenges 
remain with storage capacity planning, 
provisioning and backup. “Maintaining and 
deepening the skill sets they have today is 
important,” Gerr says. 

Storage professionals should also build a 
foundation in network storage as the net- 
working market continues to converge 
with storage. Of course, “an awareness of 
the business issues that are driving the 
organization isim- [(igeee.. 
portant, too,” Gerr SAN SKILLS 
says. @ 41864 


If your company has recently 
built or is planning to build 

a SAN, getting yourself 
assigned to the project could 
be a nice career boost: 

@ QuickLink 33260 
www.computerworld.com 


Collett is a freelance 
writer in Sterling, 
Va. Contact her at 
stcollett@aol.com. 








Middleware is Everywhere. | Can you see it? 


1. Shares credit rating. Now. 

2. Responds to mortgage broker. Now. 
3. Confers with local branches. Now. 
4. Approves loan with supervisor. Now. 


5. Does it all on one platform. Now. 


MIDDLEWARE connects the unconnected 
On demand. And middleware is software like Lotus. 
IBM Lotus® Workplace. An innovative platform based on 
open standards that combines multiple collab e apps 
in a single, dynami nment. It's one workplace 
tuned to individual roles. For real-time collaboration. Real 
business value. Flexible too, it also leverages IBM Lotus Notes™ 
@ business on demand” at ibm.com/lotus/middleware 
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Predictions: Industry pundits 


foresee terabyte cell phones 
and the death of the database. 


@ SENSIBLE DATA LIBRARIES 

An entirely new set of career paths 
will emerge from the dramatic growth 
of online storage. These new “corpo- 
rate librarians” will make sense of the 
millions of pieces of data amassed by a 
firm’s workforce and turn them into a 
sensible, searchable library of knowl- 
edge, instead of the data chaos we now 
have. 

@ James W. Gabberty, associate 
professor of information systems, 

Pace University, New York 

@ WIRELESS DATA, EVERYWHERE 

CDs, DVDs, flash drives and floppies 
will become obsolete in the next few 
years. Wireless access speeds are in- 
creasing dramatically, allowing people 
to access their data via the Internet as 
fast as they do now from their hard- 
wired drives. Just as people can make 
cell phone calls from practically any- 
where in the world today, they'll be 
able to access their personal or busi- 
ness data wirelessly from anywhere in 
the world. There won’t be a need to 
“store” it locally or copy it to a port- 
able storage medium to take it to an- 
other computer. 

® Michael Driscoll, president, Win- 
chester Electronics, a unit of Northrop 
Grumman Corp., Wallingford, Conn. 

@ ROLLING BACK IN TIME 

By 2007, fully protected, versioned file 
systems will be widely available. A 
versioned file system is time-enabled, 
allowing users or applications to roll 
back any file to a previous state. For 
applications such as databases, it 
means that it’s easy to go back in time 
and run a report for the database as of, 


| essence, file systems will become in- 





say, the end of last month. For the 
desktop user, it means the user can 
go back to any previous version of a 


| file without ever doing a backup — 


or before a virus infected the file. In 


herently self-healing, rendering virus- 
es harmless and eliminating the need 
for backup as we know it. 

® Dave Howard, president, Colorado 
Software Architects Inc., Loveland, Colo. 


@ A TERABYTE IN YOUR HAND 
Expect a terabyte of data storage in a 
cellular phone by 2007. This will be 


| achieved through continued advance- 


ments in flash silicon and multilevel 


| cell technology. 


® Dana Gross, chief marketing officer, 
M-Systems Flash Disk Pioneers Ltd., 
Fremont, Calif. 


| @ MIGRATION HEADACHES 


Data migration will become one of the 
largest issues in data storage by 2005. 
While storage devices will be capable 
of holding hundreds of terabytes of 
data, the time required to upgrade 
hardware or migrate data to a sec- 
ondary location will become prohibi- 
tive, often stretching into weeks or 
months. This conundrum will dramati- 
cally expand the market for zero- 
downtime data migration tools and 
storage systems that can mirror or mi- 
grate data from other hardware. 

® Geoff Barrall, chief technology officer, 
BlueArc Corp., San Jose 


| M@ CENTRAL ARCHIVES 


In three years, nearly all publicly trad- 
ed companies will establish enterprise 


| today. 


| Contoural Inc., Los Altos, Calif. 


| 
| they can’t comprehend the growth of 





corporate data archives. To comply 


with a complicated patchwork of regu- 
lations and discovery requests, compa- 
nies will opt to save almost everything 
in centralized enterprise data archives 
on very inexpensive storage systems. 
Centralized archives will contain a 
copy of ERP data, e-mail and docu- 
ments, and will be both centrally man- 
aged and audited. These archives will 
become as pervasive as firewalls are 


® Mark Diamond, president and CEO, 


@ HOLLYWOOD CALLING 
Storage vendors are so focused on the 
corporate data storage market that 


storage requirements in nontraditional 
markets such as the entertainment in- 
dustry. Consider that over the next 
decade more and more 
movies will be digital, yet 
a single two-hour movie 
will require about 800TB 
of storage. The digitiza- 
tion of the film industry 
alone will generate mil- 
lions of petabytes of stored data, far 





MORE PREDICTIONS 


Check out last year’s batch of 
storage forecasts. Who was right? 


@ QuickLink 33168 
www.computerworld.com 


| 


| more than today’s entire corporate 
| storage market. 


® Barbara Murphy, vice president, 
3ware Inc., Sunnyvale, Calif. 

@ SECRET AGENTS 

Agents, or bots, will be used extensive- 
ly to mine enterprise data for trends, 
insights and customer intelligence 
within the next two years. For exam- 


elmacy-U ect) Cc) 
data archiving, how about the Sea of 
Tranquility? TransOrbital Inc., a commer- 
cial firm hoping to make travel to the 
moon a routine thing, is planning to offer 
off-premises storage on the moon to 
protect critical data from natural or man- 
made disasters on Earth. Dennis Laurie, 
president of the lunar de- 
livery service in La 
Jolla, Calif. 
says the 


www.computerworld.com 


ple, the agent could mine stored e-mail 


| looking for employees talking to com- 


petitors, sexually harassing people or 
doing positive things. If I were running 
the lending department at a bank, I’d 
want to know whenever someone 
completed a loan over $300,000. Em- 
ployees will have an interface that al- 
lows them to program an agent in plain 
language to do the search and then 
show the results in a pop-up window. 
® Scott Klososky, CEO, Critical Tech- 
nologies Inc., Oklahoma City 


@ DATABASE, R.I.P. 


| The database is dead. New smart file 


systems from storage vendors will be- 
gin to emerge in 2004 that leverage 
self-describing and self-adapting tech- 
nologies, thus avoiding the complexity 
and performance tax of databases. The 
heart of this trend will be 
to describe data not in 
terms of rows and 
columns, but rather as 
business objects that can 
be accessed and managed 
in file containers, directly 
addressable by applications. It’s some- 
times called object-based storage. This 
will be a ubiquitous feature in two 
years, eroding the revenue and mind 
share of database vendors in three 
years. Smart-storage vendors will re- 
place databases for simple search and 
retrieval. 

® Michael Howard, CEO, OuterBay 
Technologies Inc., Campbell, Calif. 

@ 42198 


first step will be to send a prototype 
server to the moon in 2005, followed by 
Feta eM UCRTTme lle Me alae Tae) 
SUR Ce RTBU eee ame 
the moon. Sending and retrieving data 
will be tricky because of the three-sec- 
ond transmission delay, but Laurie says 
there are “deep-space protocols” from 
CMG meee em melee lla] 
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; Middleware is Everywhere. | Can you see it? 


1. Verifies insurance on the spot. 
2. Files digital claim in an instant. 
3. Approves estimate at the site. 


4. Orders new bumper at the scene. 


5. Receives settlement in a snap. 








MIDDLEWARE unifies the on demand wv 
On demand. And middleware i tware like IBM 
2 Content Manager. A complete and open soli 
manages and leverages info 
anywhere. Even content like vi 
sily and s accessed. It's h 
soars and knowledge 
@ business on demand” Go to ibm.com/db2/n 
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www.SpectorCNE.com 


Record Everything Your 
Employees Do On The Internet. 


With Spector CNE on your network, you A few minutes a day of personal surfing, online shopping and chatting may seem harmless, 
will easily prevent or eliminate problems 


associated with Internet and PC abuse. but consider this... 


Spector CNE provides an immediate and A recent study concluded that employees spend an average of 75 minutes per day using 
accurate record of every employee's: . : ‘ge : ; 
office computers for non-business related activity (surfing porn, gambling, shopping or even 
fe) Emails Sent & Received searching for sex online). That translates into an annual loss of $6250 per employee or more 
than $300,000 per year down the drain for a company of just 50 employees. 


ag So how do you catch guilty employees who won't admit they are stealing company time? 


Keystrokes Typed Introducing Spector CNE - Corporate Network Edition 


Web Sites Visited At the touch of a button, you can monitor any employee, any time, anywhere on the 
network. Spector CNE secretly records and archives chat conversations, instant messages 
(AOL, MSN and Yahoo), emails (including Outlook, Exchange, AOL and web-based mail like 
Hotmail}, web sites visited, keystrokes typed, files downloaded, programs run and more. 


Programs Launched 


VCR-like Snapshot Recording 


And unlike many filtering and blocking tools, Spector CNE records everything they do in 
exact visual detail. So, you have absolute proof that goes way beyond just knowing they 
Te visited porn.com. 


1-888-598-2788 Take control of employee PC and Internet abuse with Spector CNE. It'll be the best 
www.SpectorCNE.com software investment you make this year. 


surf sire websit hae ined 
| _ from behind - E er casing ; 
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IT Careers: Catalyst Issues Women in High Tech Results 


hen Microsoft and Catalyst joined forces to look at 

the progress of women in high tech careers, the 
effort was destined to provide some surprising and 
actionable information. It did. A half dozen roundtables 
and dozens of interviews later, companies from the large to 
small, from the mature to the fledgling, have weighed in on 
the status of women. Companies participating in the study 
included IBM, Dell, Agilent, Motorola, Zilinx, Xerox and 
Texas Instruments. 


The findings provide a partial picture. Less than 30% of 
the nation’s IT workers are employed by SEC-defined high 
tech firms — those whose business is production of 
computing hardware and software. Regardless, the findings 
of “Bit by Bit: Catalyst's Guide to Advancing Women in High 
Tech” could apply to high tech jobs in other industries, 
according to llene Lang, president of Catalyst. 


The biggest ah-hah of the study: companies who pride 
themselves on promoting people based on merit as a core 
element of their culture in fact do not. Men and women in 
the roundtables reported their companies are exclusionary 
and don't support women, according to the study, which 
was released Nov. 12. “Their actions surrounding the 
advancement of women are inconsistent with the 
perception the industry has of itself,” says Lang. 


Other barriers to the advancement of women in IT 
professions included: companies universally don't 
strategically or objectively identify and develop talent; 
women lack role models, networks and mentors; and the 
demands of work and careers are at odds with personal life 
and responsibilities. 


The good news is progress 
has been made. The Catalyst 
Award each year recognizes 
companies for innovation 
of programs and results 
they show in terms of 
impact on success 
and opportunities for 
women. “If you look 
at 10 years ago, 
the award was given 
to companies for 
outstanding child care 
options,” says Lang. “Today 
the bar is much higher. We are 
looking at companies that have 
grappled with work design and who have 
been responsive to the needs of 
employees at different phases of 
their life cycle. 


“Identifying and managing 

talent is much the same situation,” Lang adds. 

“We are seeing more explicit and forward- 

looking talent management programs, beyond looking over 
a list of names, but mostly in larger companies. And 
managing and developing talent very much connects to the 
feelings of isolation, lack of role models and the need for 
better networks among professionals as they grow.” 


To deal with the barriers, Catalyst has prepared a tool 
kit of case studies and programs that can be used by 


companies large and small to address the barriers 
to women’s advancement. The goal: change. “In 
the next 12 months, we're talking about 
really smart people who care about their 
companies, their careers and their lives, 

and that they become aware about what 

we have learned and have plans in place. 


“Results will come over a longer period 

of time,” she adds. “Just as we've seen a 

real shift from 10 years ago to today, we 

want to see just as big a change in the 

next decade. Ten years from now, we hope 

to see better representation of women at 

senior and CEO levels. We would hope to see a 

reverse in the decline of women getting technical 

degrees (which has fallen by a full 10 percentage points 

in the last decade). And, we would hope that the Catalyst 

Award would have high tech companies as regular 

winners (only IBM and TI have claimed the award 

from the high tech sector), demonstrating leadership 
and innovation.” 


For more information about IT Careers advertising, 


please contact: Nancy Percival 

Vice President, Recruitment Advertising 
800.762.2977 

500 Old Connecticut Path 

Framingham, MA 01701 

Produced by Carole R. Hedden 





following positions: 


¢ Software Architect 
¢ Data Architect 


Be there for our 


We'll be there for you. 


or nearly a century, we have been committed to exceeding customer expectations 

and maintaining the highest standards of integrity. We offer our customers and our 

employees a different way of doing business. If you possess team spirit, a passion for 
solving customer problems and a drive for results, we invite you to join us in one of the 


¢ Sr. Programmer Analyst 
¢ Sr. Systems Analyst 


¢ Sr. Data Analyst ¢ Project Manager 


For complete job postings and to apply online, visit: www.standard.com/careers/ 


www.Standard.com 


The Standard offers a competitive benefit package, and the 
backing of a financially strong company that values its employees. 
If unable to apply online, you may mail or fax your resume to: 
Standard Insurance Company, Attn: Human Resources, 1100 
SW Sixth Ave., Portland, OR 97204; Fax: (503) 321-7757. We're 
proud to be an equal opportunity employer. 
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Software Engineer sought by 
software consulting services 
company in Denver, CO to work 
in Wilmington, DE and other 
unanticipated job sites in the 
U.S. to engage in full-life cycle 
software development of 
client/server and web-based 
software applications. Analyze 
requirements. Create designs 
and design documentation 
Code, test, and debug the soft- 
ware applications. Engage in 
project management as 
required Use Oracle, Java 
Script, HTML, Cold fusion, and 
other tools and languages in the 
design and development 
process. Requires 4 yrs soft- 
ware development experience 
working knowledge of Oracle 
M-F; 8am-5pm; $72,235/yr 
Respond by resume to 
Employment Programs, PO Box 
46547, Denver, CO 80202 and 
respond to JON CO5060976 


Regional Manager - Latin 
America wanted by a Tele- 
communications co. in Newark 
NJ. Must have a MBA or 
Master's degree in Finance or 
related field & 2 yrs. exp. as a 
Financial/Business Analyst. Exp 
must include: 2 yrs. of Sales/ 
Marketing management in one 
Latin American region country; 1 
yt. accounting/finance exp.; and 
knowledge of networks and net- 
working engineering. Must 
speak Spanish and be available 
for international and domestic 
travel. In lieu of a Master's 
degree plus 2 yrs. exp. we will 
accept a Bachelor's degree & 4 
yrs. of progressive relevant exp 
Please respond to Net2Phone. 
Inc., 520 Broad Street, Newark 
NJ 07102. Attn: Lilly Abreu 
labreu@net2phone.com __refer- 
ence # 12771 


PROGRAMMER ANALYSTS for 
Chicago, IL office. Design & 
Develop software applications 
using C++, Oracle, Sybase 
XML, UML, Coolgen, inter- 
woven, ClearCase, ClearQuest. 
Plumtree, ITS, PVCS, UNIX 
Bachelors req'd in Computers 
Engineering, Math or related 
field of study +2 yrs of related 
exp. 40 hrs/wk. Must have legal 
authority to work permanently in 
the U.S. Contact HR Manager, 
Allied Business Consulting, Inc 
2906 Merry Wood Drive, Edison 
NJ-08817 


Programmer Analysts needed 
Seeking candidates possessing 
BS or equivalent and/or relevant 
work experience. Part of the req 
rel. work exp. must include 1 
year working with VC++, SQL 
Duties include: Develop, main- 
tain and modify programs and 
applications; Analyze, test and 
debug software. Work with the 
following VC++ Crystal 
Reports, SQL and Oracle. Mail 
resume, references and salary 
requirements to Trapeze 
Software Group, inc 
Middlesex Turnpike, Burlington 
MA 01803 


SBI is looking for the following 
positions for its offices in 
Houston, TX, San Francisco 
CA, Warren, NJ, Sait Lake City, 
UT and Portland, OR Art 
Director Web Designer. 
Programmer Analysts, Technical 
Architects, Technical Consul- 
tants, Business Strategists. 
Systems Analysts, Software 
Engineers, Software Deve- 
lopers SAP Consultant, 
resumes by email or fax only to 
HR, SBI 2825 East Cottonwood 
Parkway, Suite 480, Salt Lake: 
City, UT 84121 
careers@sbiandcompany.com 
Fax (801) 733-3201 


Software Engineer. Sought by 
Englewood Colorado consulting 
company to work in various 
unanticipated locations through- 
out the U.S. Duties: Research 
design and develop computer 
software systems in conjunction 
with hardware product develop- 
ment. Analyze software require- 
ments to determine feasibility of 
design within time and cost 
restraints. Consult with clients 
to define needs or problems 
Use of PL/SQL, UNIX, C, C++ 
Cold Fusion, Fortran, SQL 
HTML, JavaScript and Windows 
NT. Regs. Masters or equivalent 
in Computer Science, Computer 
Engineering, Mechanical Engin- 
eer or related field. Plus 1 year 
in the job offered or 1 year in a 
related occupation, including 
Scientific Officer. Will accept a 
Bachelors degree plus five 
years of progressive experience 
in the field or related occupation 
in lieu of required education and 
experience. $77,000/year, 40 
hrs/wk, 8AM-5PM. Respond by 
resume to WORKFORCE 
DEVELOPMENT PROGRAMS. 
PO Box 46547, Denver, CO 
80202, and refer to Job Order 
No. COS 572 


Test Engineer Assist in the 
development and maintenance 
of drive qualification test 
process Participate in the 
development of test scripts in 
support of hard drive design and 
reliability verification. Maintain 

collection system 
Configure test networks and 
perform system support for test 
clients and hosts. Under direct 
supervision develop hardware 
control and data collection soft- 
ware using SQL, Visual Basic 
LabView and other program- 
ming languages. Develop and 
implement user interface and 
databases Requirements 
include a Bachelor's degree or 
equivalent in Computer Science 
an Engineering discipline or 
related field and three years of 
work experience in the job 
offered or in a related electrical 
engineering field Applicants 
must have unrestricted autho- 
tization to work in the United 
States. Salary $77,855/year. 40 
hours/wk. Respond with two 
copies of resume to Case 
#200201616, Labor Exchange 
Office, 19 Staniford St., 1st Fi 
Boston, MA 02114 


Programmer Analysts to ana 
lyze, design web appis_ using 
Java, VB, Java Script, VBScript 
HTML, DHTML, ASP, PHP. 
Access, Oracle, SQL Server, 
Dreamweaver, Active X, IIS 
under Windows, UNIX OS; gen- 
erate batch reports; conduct 
user req/feasibility studies & 
systems analysis; maintain 
document, support, test and 
debug applis. Require: B.S. or 
foreign equiv in CS/Engg(any 
branch) with 2 yrs exp in s/w 
industry. High Salary. F/T. Travel 
involved. Resume to: HR, Salem 
Associates, Inc., 405, 6th Ave 
Ste 102, Des Moines, IA 50309. 


Computer Training Specialist, 
Must have Bachelor’s/equiv 
in Computer Science/Engin- 
eering/related field, and 2 yrs. 
IT exp. Develop and conduct 
programs to train employees 
of computer learning centers 
in course instruction. Write 
training program, including 
technical texts, handouts, and 
tests. 40 hrs/wk, 9AM-5PM 
Competitive Salary. Send 
resume to: Silicon Valley 
Centers, 500 Pinnacle Ct., 
Ste. 510, Norcross, GA 
30071 
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Verinon Technology Solutions 
Ltd. is looking for the following 
personnel 

1) Programmer Analysts: Must 
have 2 years experience in any 
2 of the following: Java, XML 
J2EE, EDI, Rational Rose, EJB 
Siebel, Web Servers, Oracle 
Cold Fusion, Documentum 
Livelink, PeopleSoft SAP, JD 
Edwards SAS Business 
Objects, Cognos, Abinitio, Brio 
and Essbase 


2) Management Analysts 
Design, Develop new systems 
and improve the performance of 
existing Business systems using 
Management Information 
Systems and Operations 
Research 


3) QA Analysts: Plan, Document 
and execute test scenarios, doc- 
ument test cases, test plans 
Must be proficient with Manual 
and Automated testing 
Experience with Silk, Mercury, 
WinRunner Test Suites. 21 
CFRpart 11 experience is Plus. 


Should have a_ Bachelor's 
Degree in Computer Science. 
Related fieid 


Mail Resume to Verinon 
Technology Solutions Ltd, 300 N 
Dakota Ave, Suite 208, Sioux 
Falls, SD 57104 


QA Analyst |. Mult. Openings. 
Under supn, work w/technology 
& end users to identify & define 
applic changes to support busi- 
ness needs. Outline ting 
reqmts in support of changes 
(test pian, test conditions, test 
data & test scripts). Conduct 
routine to moderately complex 
functional & regression testing 
following Cendian testing stds 
wiregard to deliverables, track- 
ing & reporting. Perform risk 
analysis & communicate to sr. 
analysts & mgmt. Coord s/ware 
delivery & promotion w/Dvipmt 
incl correction & re-testing. Work 
w/other organizations, internal & 
external, to conduct & eval test 
results. Participate in "lessons 
learned" events for significant 
releases. Assist in researching & 
resolving production issues as 
needed. Req.: Bach or foreign 
equiv. in Engg or CS. 2 yrs. exp 
in job offd or as Test Engineer. 
Working knowl. of Mercury Load 
Runner, Segue SilkPerformer. 
Rational TestStudio, Compu- 
ware QA Center Performance 
Edition, C++ dvipmt, Oracle 
applics (SQL PLUS, Developer 
2000, Forms/Reports 6i), SQL 
Navigator & SQL Toad. Resume 
Ms. Quincy Valencia, Cendian 
Corp., 6 Concourse Pkwy., Ste 
2800, Atianta, GA 30328 


Dir. of Business Operations 
(Regional) - Oversee business 
development of operations in 
assigned region: perform man- 
agement duties & expand busi- 
ness w/key customers; oversee 
CAD/CAM sware devp projects 
manage team of 

neers; co-ordinate tech 
services btw mgt., production 
dept. & customers; provide pro- 
duction quality assurance for 
automotive products; perform 
cost & time estimates on sware 
implementation projects. Must 
have Bachelor's degree in 
Electronics Eng’g or closely 
related field, plus 5 yrs. exp. in 
job offered or 5 yrs. progressive 
business devp. exp., including 2 
yrs mgt. exp. overseeing sales & 
eng’g teams. Must have work- 
ing knowledge of CAD/CAM 
sware design & devp. 5 days, 40 
hrs/wk Sal: $94,315/year. 
Send two (2) copies of resume 
to: Job Order #2003-607, P.O 
Box 989, Concord, NH 03302- 
0989 


System Architect (Wireless 
Systems) Responsible for dvipg 
testing & troubleshooting s/ware 
architecture for next generation 
mobile data switching & svcs 
platform being dvipd by Co 
Responsibie for making complex 
architectural decisions, analyz- 
ural tradeoffs w/in 
g system & provid 
guidelines for 
ucts dvipd are 
cross-section of wireless & 
TCP/IP based computer n/work 
ng, must employ expertise in 
both wireless & TCP/IP based 
Internet solutions using 
UNIX/LINUX rating systems 
& Cc anguage skills 
Responsible for evaluating 3rd 
party technologies & deciding 
ncorporate those 
Dsgn & 
wiembedded & assembly lan- 
guage aspects. Min. reqmt: 
Masters or equiv in Comp 
Math or closely related field ¢ 
yrs exp in job to be performed or 
3 yrs exp in closely related s/w 
engg position in wireless n/work 
field. 3 yrs exp must incl 2 yrs 
concurrent exp w/: £ 
based embedded 
TCP/IP acce: 
ing 
Unix/Lin rating system; & 
dvipg microcode applicns. Job 
Site Marlbo ’ M 
$120K/yr. M-F 5. To apply 
send f c sume to 
Case 1 Labor 
Exchange 1g 


St, 1st F oston, MV 2114 


Staniford 


Principal Software 
serve as senior 

contributor w/responsibility for 
researching new te ologies & 


project planning Specific 


Engineer to 


technica! 


will architect new online transa 

tion processing systems in a 
client server/web-based multi 
platform 
Microsoft SQL Server database 
development & implementation 
projects; manage & pian project 
deliverables, specify due dates 
for project completion & mile- 
stones, identify quality stan- 


ronment ead 


dards & adjust scope. resources 
& schedules to achieve maxi- 
mum quality; & establish method 
for communicating w/project 
team & business users to keep 
project file updated. Requires 
BSc or equiv in CSc, Eng, Math 
or Physics plus 4 yrs exper in 
Job Offered, OR 4 yrs in web o 
client/server Jevelopment 
Candidate must also possess 
demonstrated expertise in the 
following: database develop 
ment & implementation (writing 
scripts, stored procedures, trig- 
gers & tables) in SQL Server. 
developing web-based CLTP 
system using ASP, XML and 
VisualStudio.net; and in 
development in ASP. 

JAVA. Sal: $70,C yr, M- 

5P. Send 2 resumes to Case 
#200203099, Labor Exchange 
Office, 19 Staniford St., 1st fi 
Boston MA 02114 EOE 
Applicants must be U.S. work- 
ers eligible to accept full-time 


employment in U.S. 


Computer Software Associates 
(ICSA) is looking for software 
engineers, system/programmer 
analyst with skills in J2EE, Java 
Websphere, Visual Age, Oracle 
SQL, VB, ASP, ASP.Net, VB.Net. 
DB2, Unix. BS or equivalent 
required. Please contact raghu- 
ponnala@icsa-us.com. EOE 


IT specialists wanted 
ARWANO, Inc. for various 
tions using Oracle, SQL 
C/C++, SAP, AS/400, RPGLE 
COBOL/400, CL, SQL/400 
Query/400. Oracle ROBMS 
Developer 2000, Windows NT. 
We are small but stable. Minimum 
is BS degree. IT experience pre- 
ferred. Travel required for some 
positions. Please apply at 
waseem@arwano.com, EOE 


Computerworld + InfoWorld + Network World + November 17, 2003 


Lead Network Engineer to 

face w/business units to deliver 
high-level & detailed design in 
response to identified o 

needs. W lead & 


neering s mp 

tion S yect 

ment & network 

tion; work w/systems teams to 

certify new hardware platforms 

& software code; apply exper 
nce w/ network security & pri 

tocols including UDP and 

TCP/IP. C++, Peri & LAN net 

work technologies; integrate 

project objectives vera 

business 

network 

timely re 

problems & seamless 

tion of new products 


work; provide f 


network 

Requires B.Sc 

Eng, Math 

years experience in J 
OR 2 years in netw 


ment se 


grated. deve’ 
Server interfaces 
ules & Debugger 
Oriented program./techn 
C++, MFC, Rogue Wave 
Java, Java Scripts, A 
C#(CSHARP Netscape/IIS 
server, Dynam HTML, MS 
Visual Studio, dBB, MS SQ 
Oracle PL/SQL Activex 
Controls Spread/Grid/Data 
Explorer) on Unix/Windows NT, 
workflow data driven & 
server 
syst 
develop int'l user interfaces w 
single-byte/multi-byte gua- 
ges urrencies/date format 
develop network Windows NT 
syst. AP!, multi-process, Wind- 
ows client/Unix serv. prog. for 
connectivity. Master's degree or 
equiv. in Comp Engineering 
or related req'd Bachelor's 
Comp Engineering, or 
related + 5 yrs progressive exp 
in soft. engineering or related 
will sub >» Master's. 
Competitive salary, 40 hrs/wk 
OT as ne 


Powers, Hi 


d resume to: M 
oreCARD,1 Meca 


Way, Norcross, GA 30093 


Computer Programmer 
Write programs for invoice 
mgmt., financial accounting 
system & inventory mgmt 
using MSSQL, VB, Java 
ASP, JavaScript, JSP and 
MS C++. Req: BS in Comp 
Sci Comp Eng or 
Electrical Eng. 40-hr.wk 
Job/Interview Site: LA, CA 
Send resume to Futuranet 
Inc., 4525 Wilshire Bivd, # 
206A, LA, CA 90010 





Database Systems 
Programmer/Analyst 


Coordinates, administers, and 
designs a high end medical 
patient outcome database sys- 
tem to insure accurate integra. 
tion and flow of information 
regarding patient blood and mar: 
row transplantation, between an 
SAS-based statistical database 
and an Oracle database. Uses 
principles of database manage 
ment system .w establish data 
es, formats, and perform 
program validation testing to 
insure formatted data is capable 
of transmission to IBMTR 
ABMTR database Analyzes 
integrity of disks and emails 
uses Visual Basic to audit data 
programs and performs migra- 
in re-writing of legacy SIR to 
integration with 
database Requires 
Bachelor's degree in Mathe- 
matics Statistics and/or 
Computer Science and 2 years 
direct experience. in lieu of a 
Bachelor's degree and 2 years 
experience will accept a 
Master's degree in fields listed 
above. Send resume, no calls 
te 


Medical College of Wisconsin 
Attn: Employment Office - 
JMC1110 
8701 Watertown Plank Rd 
Milwaukee, WI 53226 
Fax: 414-456-6502 


Sr. Analyst, Prog. Multiple 
Openings. Dvip/modify/impimt 
complex info. systems used for 
retail advtg/mktg that are thor- 
ough, accurate & conform to 
FSG stds. Translate customer 
reqmts, recommending system 
solutions & form. detailed specs 
for writing prgms. Code 
test/debug/document assign- 
ments. Research/resolve com- 
plex tech. problems. Provide 
tech. consulting on specialized 
phases of app. system analysis 
& prgmg using business app 
knowl. Req Bach or foreign 
equiv in IT field (in lieu of deg 
will accept equiv in educ., exp or 
both). 3 yrs exp in job offd or as 
Software Analyst. Following exp 
(may be concurrent): 3 yrs using 
relational d/base tools; 2 yrs 
prgmg exp in Java/JFC/Swing 
enterprise-level apps., in web 
apps. using Java, JSP, Serviets 
EJB HTML DHTML & 
JavaScript, in Java dvipmt on 
MAC OS 9 or X, & in UDB DB2 

yr in Java distributed n-tier 
apps. using IBM-Websphere & 
WSAD; & working knowl. of 
reports using datawarehousing 
concepts in retail mktg envrmt & 
f retail mktg business process- 
es. Resume: Lisa Serrioz, FSG. 

5 State Bridge Rd, Duluth. 
GA 30097 


Stanford Technology Partners 
Inc is an Information 
Technology consulting company 
with its clients across the USA 
We seek an UNIX Solaris 
System Administrator. Duties 
include systems administration 
for global e-business retail 
exchange, scalability analysis 
and capacity planning, expertise 
on sun clustering with a strong 
focus on design and architec 
ture, assist with transition to co- 
location environments, establish 
and maintain close working rela- 
tionships with application teams 
and users in the design, devel- 
opment, tuning, and problem 
resolution of systems, communi- 
cate effectively in meetings and 
discussions, maintain software 
license inventory and Perform 
emergency problem resolution 
if interested, please send 
resume to: Stanford Technology 
Partners inc.289 Boston 
Turnpike Suite #6 Shrewsbury 
MA 01545 e-mail 
recruiter@stpincusa.com 
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Programmer Analyst for NE OH 
to work under supervision to 
design/install/update/trou- 
bleshoot and maintain Windows 
2000/NT computer network 
several client computers 
servers and printers. Under- 
stand/troubleshoot computer 
network issues. Design/ devel- 
op/test web pages. Design 
develop/test applications for city 
planning business using Visual 
Basic 6.0 Min Bachelor's 
degree or equiv., 3 months exp 
Must have knowledge of 
Windows 2000/NT network 
infrastructure, Coldfusion, Net- 
Objects Fusion, HTML, XML 
Visual Basic, CSS, and MS 
Access. Experience configuring 
Cisco routers required 
Resumes only: 1299 Superior 
Ave. Cleveland, OH 44114. No 
calls. EOE 


Oracle DB Administrator for 
International Telecommun- 
ications Carrier in Miami, FL 
Duties: Admin, maintenance. 
tuning, monitoring & backup of 
ISP/Portal, Presubscribed, CRM 
& Prepaid Oracle D/bases. As 
part of ISP TEAM, give 7X24 
support of ISP/PORTAL & CRM 
applic, servers & d/bases while 
working w/providers to resolve 
applic problems. Eval, analysis 
& impimtn of expansion of 
d/bases. Coord & plan task 
w/development team. Req: Bach 
(or equiv) in Comp Engg. 6 yrs 
exp in job offd or 6 yrs exp as 
D/base Analyst/Software Dvipr 
for related industry. Will consider’ 
applicants w/any suitable combi- 
nation of education, training or 
exp. Send resume to C. Cairo, 
HR, Americatel, 4045 NW 97th 
Ave, Miami, FL 33178 


Sr Network Engineer 
Perform new product accep- 
tance & certification. Lead 
team performing verification 
of softswitch & gateway soft- 
ware/hardware (SIP, MGCP, 
SS7). Manage production 
SS7 network & Agilent 
NgNAS system. Req. BSc. or 
its foreign degree equivt in 
CS, EE or related field + 1 yr 
exp. in job offered. Resume 
to Lynette Kahue, Cbeyond 
Communications 320 
Interstate N. Pkwy, SE, Ste 
300, Atlanta, GA 30339 


System Engineer: Dsgn/install 
maintain Solaris Sun Ultra ES. 
HP- UX, SCOUNIX, Linux & NT 
sys. Install/config Veritas Vol 
Mgr/Cluster Sun —_ Cluster 
SPARC Storage Array & Sun 
Ent. Network Array, |Planet. 
Weblogic & Websphere.Dvip 
C/C++/Shell programs. Config 
checkpoint firewall. Dsgn/dvip/ 
adminOracle 8i. implement Sys 
Security. Req MS in Comp Sci or 
Engg +3 yrs exp.Will consider 
BS + 5 yrs exp. Apply: HR 
Calibrate Inc 24 Crescent 
St.,Ste105, Waltham, MA 02453. 
Fax: 800 238 2268 


Jr.programmer/Ass.pro- 
grammer Analyst to write & 
maintain application prog. & 
collect data to help 
dev/modify complex data 
processing systems, pre- 
pare specifications. Req'd 
B.S in comp sci, compEng 
or Elect.Eng. 40hr/wk. 
Job/Iinterview site: Milpitas, 
CA. Send resume to Global 
Finance, 1323 Jacklin Rd., 
Milpitas, CA 95035 


Computerworld + InfoWorld + Network World + November 17, 2003 


ProgrammerAnalysts to ana- 
lyze, design s/w appls_ using 
SAP R/3, ABAP/4, C, C++, Java. 
VB, JSP, JScript, HTML on 
UNIX/Windows os; gather/doc- 
ument reqs from user communi- 
ty; test/troubleshoot project appl 
code according to system 
objectives. Require a B.S. or for- 
eign equiv in CS/Engg (any 
branch)with 2 yrs exp in IT. High 
salary. F/T. Travel involved 
Resume to HR 
International, Inc., 4898, South 
Old Peachtree Rd, Norcross. 
GA 30071 


Smartsoft 


Senior Programmer Analyst 
sought by multinational manu- 
facturer of welding and cutting 
apparatus for position in 
Denton, TX Must have 
Bachelor's Degree in 
Computer Science and 3 yrs 
exp. in designing and devel- 
oping application systems 
Development experience in 
JD Edwards World also 
required. Send or fax resume 
with cover letter to 
Thermadyne Industries, Inc 
Attn: Human Resources, P.O 
Box 1007, Denton, TX 76202 
Fax No. (940)381-1265. 


LogicaCMG has an opening in 
its Dearborn, MI office for a 
Software Engineer to convert 
data from mainframe Legacy 
systems to Datawarehouse on 
Teradata & SQL server. Must 
have a Bachelor's degree in 
Computer Science and 1 year of 
experience in software applica- 
tions, including experience with 
Queryman, Data Modeling, Data 
Warehousing Concepts and 
Citrix Nfuse. Interested candi- 
dates should send resume to 
Ref. SE, Kathleen A. Boyle 
Executive Assistant for Human 
Resources, LogicaCMG, 32 
Hartwell Avenue, Lexington, MA 
02421 


PROGRAMMERS/ENGINEERS 
needed: Several Sr. and Mid 
Level positions available for 
qualified candidates possessing 
MS/BS & relevant work experi- 
ence. Work with COBOL, JCL 
VSAM, DB2, CICS, ORACLE 
JAVA, SERVLETS, XML, EJB 
C++, VC++, SYSTEM ADMIN 
DBAs, SAP, Siebel, PeopleSoft 
and Technical 
Piease mail resume to Attn: HR 
Dept. LanceSoft Inc, 2200 West 
Higgins Road, Suite 210 C 
Hoffman Estates, IL 60195 


Recruiters 


PROGRAMMER ANALYST for 
I.T. co in Ridgewood, NJ 
Analyze, design, install & main- 
tain corp netwrk servrs, opertng 
systms & buss applictns in 
Windows NT, Novell, Citrix 
Winframe & Metaframe envrnm- 
nts. Dev buss appictns on the 
intranet. Req bach deg or equi in 
sci, comp sci, engg or equiv 
w/min 2 yrs exp. Will accept any 
comb of edu, traing and/or exp 
that equates to the min reqmnts 
Apply to HR, Futuresoft inc, 628 
Witthill Rd, Ridgewood, NJ 
07450, fax 201-445-0310 email 
jobs@futuresoftconsulting.com 


Maeve ucReeyen 
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Software engineer te design, 
develop and test computer pro- 
grams for business applications. 
analyze software requirements 
to determine feasibility of 
design; direct software system 
testing procedures using exper- 
tise in Flash, TogetherJ, Rational 
Rose, XDE, Oracle and Corba 
Requirements: Bachelor's Deg- 
ree or equivalent in Computer 
Science or related field and two 
years experience as a software 
engineer or computer program- 
mer, knowledge of Flash 
TogetherJ, Rational Rose, XDE 
Oracle and Corba Salary 

Working Cond- 
itions: 8:00 A.M. to 5:00 P.M., 40 
hours/week, involves extensive 
travel and frequent relocation 
Apply: Site Manager, Armstrong 
County Career Link, 1270 North 
Water Street, PO Box 759 
Kittanning, PA 16201-0759, Job 
No. WEB371724 


PROGRAMMER/ANALYST to 
analyze, design, develop main- 
tain and implement multi-tiered 
distributed application software 
using Java, J2EE, Apache Struts 
Framework, XML, XSL, JMS 
JMX, BEA Weblogic, IBM 
WebSphere, Java Swing, Unix 
Shell Scripting, Rational Rose 
for UML, MS Visio, DB2, Oracle, 
LDAP, SSL and Ant on UNIX 
and Windows piatforms 
Require B.S. degree in 
Computer Science an 
Engineering discipline, or a 
closely related field with 2 yrs of 
exp in the job offered. Extensive 
travel on assignment to various 
client sites within the U.S. is 
required. Competitive salary 
offered. Apply by resume to: Roz 
L. Alford Principal, ASAP 
Staffing, LLC, 3885 Holcomb 
Bridge Road, Norcross, GA 
30092; Attn: Job AK 


Forest Laboratories, Inc. has 
openings for Database Analyst 
wiat least 4 yrs exp in comp 
systms dvipmt incl systms 
analysis, dsgn, prgmg, testing 
documentation & d/base admin 
exp incl creation, installation 
tuning, admin & maintenance of 
d/bases using Oracle, SQL 
PL/SQL, & Oracle Enterprise 
Mgr on Unix or Win NT pilat- 
forms. Dsgn of Clinicai/pharma- 
ceutical d/base systms, & Admin 
exp on Clinical trails d/bases are 
reqd. Positions req Bach in 
Comp Sci or related discipline 
Mail resume to HR Dept.-Code 
MJS, Forest Laboratories, Inc 
Harborside Financial Center, 
Plaza V, Jersey City, NJ 07311- 
4994 


Software Engineer, 
Design & develop graph-based 
software. Inspect & maintain 
tools for program understanding 
& info. assurance. Scale present 
program slicing & code surfing 
technology to 1M SLOC. Adapt 
program for C++. Improve pro- 
gram's precision with better 
pointer analysis & fine-grain 
dependence analysis. Develop 
efficient algorithm & quality 
designs, & write code. Req 
Masters in Comp. Sci., Comp 
Eng. Or Elect. 40 hr-wk 
Job/Iinterview Site: Sunnyvale 
CA. Send resume to Redstone 
Technologies, 530 Lawrence 
Expressway, #320, Sunnyvale. 
CA 94086 


AE Wenham 
IT career? 


Check out our jobs 
in the combined 
CareerJournal.com 


database. 


www.itcareers.com 


Senior Systems Developer 
(Boston, MA) Design & develop 
risk mngm't soft. app's using C 
C++, Perl, Java, VB, & COM, & 
3rd party data integration mid- 
dieware inci. Mercator 5.0 
devi'p XML-based financial data 
loading tools; design data inte- 
gration tools for Risk Analytics: 
devi'p & integrate soft. & web 
hosting app’s using SQL server 
tech.; integrate customer posi- 
tion feeds & market data feeds 
devi’p next generation of ASP 
Application Management 
Framework; perform unit testing, 
system testing, soft. installation 
& support activities; ensure inte- 
gration of XMLs into database 
Min. req’s: B.Sc. or equivalent in 
Computer Science, Electrical 
Engineering, or related field 
plus 3 yrs. exp. in job offered, or 
in positions responsible for busi- 
ness applications software 
development. Must have ability 
to use software/middieware to 
generate XMLs for financial 
models; and strong understand- 
ing of MS SQL Server app’s 
required. Must have unrestricted 
authorization to work in U.S. M- 
F, 9am-5:30pm, 40+ hrs/wk 
Salary: $90,461-$100,000/yr. 
Send 2 copies of resume to 
Case No. 200203062, Labor 
Exchange Office, 19 Staniford 
St., 1st Fl., Boston, MA 02114 
An EOE 


A position is availabie for a 
Senior Developer with an 
Atlanta-based travel technology 
and processing solutions com- 
pany. The Senior Developer will 
architect analyze design 
implement, and maintain IT solu- 
tions in the EAD department. 
Candidates for this 
should possess a Bachelor's 
degree in Computer Science or 
a related field and at least 5 
years’ experience in software 
engineering, including object ori- 
ented methodologies; two years’ 
experience with web applica 
tions; and demonstrated know!- 
edge of UML, XML, database 
connectivity including SQL logic 
and architecture, JAVA in the 
enterprise environment, and 
team leadership skills 

Apply by mail to 

Lisa Goodman 

TRX, Inc. 
6 West Druid Hills Drive 
Atlanta, Georgia 30329 


International Programming & 
Systems, Inc. has various 
fo Analysts. 

ers with any of the fol- 

ual Basic 6.0 

C#; Javascript 

VBScript; ASP; SQL Server 
Oracle HRMS; Oracle Apps 11i 
MQ Series; MQSI; Oblix Identity 
Mgmt Corillian Voyager. 
Positions are available through- 
out the US inc. Seattle, WA, NJ 
and GA. IPS also has openings 
for Sales and Recruiting staff in 
our San Fran © office 
Electronic responses are 
encouraged, cflavell@ipsameri. 
ca.com or mail resume to IPS 
1875 So. Grant Street 10. 
San Mateo, CA 94402 (Fax) 


[650 572-8679. Principals only 


Configuration Manager: Man- 
age the internal billing configura- 
tion team for the Caribbean 
organization. Assist w/the inte- 
gration of telecommunication 
BCC billingJOSS systems. 
Manage the full life cycle of 
application deveipm't projects 
Bs.Sc. Computer Sc. or related 
field (or foreign equiv). Project 
mgmt exp. in telecommunica- 
tions industry providing product 
configuration/testing support. 
Competitive salary. EOE 
Resumes to: HR Dep 
Centennial Communications 
Corp. 2121 Ponce de Leon 
Bivd #800, Coral Gables FL 
33134 


IT|careers 


Computer 


As a $180 million industry 
leader, we are able to provide 
our people with the kind of work 
environment, opportunities, ben- 
efits, growth potential and pro- 
gressive training others can't 
match. We are looking for IT pro- 
fessionals with a minimum of 1+ 
years experience for the follow- 
ing job titles 


+ PROGRAMMER/ANALYST 

+ SYSTEMS ANALYST 

+ SYSTEMS PROGRAMMER 

+ DATABASE ADMINISTRATOR 

+ DATABASE ANALYST 

+ LAN ADMINISTRATOR 

* SOFTWARE ENGINEER 

+ WEB DEVELOPER 
ARCHITECT 

+ DATA WAREHOUSING 
ARCHITECT 

+ IT PROJECT MANAGER 

+ BUSINESS ANALYST 

* SAP FUNCTIONAL AND 
TECHNICAL EXPERTS 

+ HIGH LEVEL SOLUTIONS 
SALES EXECUTIVES 

* QA/TESTER 

* TECHNICAL RECRUITER 


Our skill sets include 

* CLIENT/SERVER 

+ ERP - SAP, ORACLE 
PEOPLESOFT 

* INTERNET 

* E-COMMERCE 

+ MID-RANGE, AS/400 

* CRM - SIEBEL 

* DATA MODELING 


Contact the Corporate Head- 
quarters for positions available 
in the following areas: Arizona 
Colorado, Connecticut, Florida 
Georgia, Illinois, Massachusetts. 
New Jersey, New York, North 
Carolina, Pennsylvania, Sout- 
hern California Texas 
Virginia/DC 


For consideration please refer- 
ence Job Code: RIRCW16 and 
send your resume to: RCG 
Information Technology; Attn 
National Recruiting 379 
Thornall Street, Edison, NJ 
08837; FAX: (732) 744-3583 or 
email to: recruit@rcgit.com We 
are an Equal Opportunity 
Employer. M/F/D/V. 


www.rcgit.com 
RCG Information Technology 


Software engineer to design 
develop and test computer pro- 
grams for business applications 
analyze software requirements 
to determine feasibility of 
design; direct software system 
testing procedures using exper- 
tise in ASP, Visio, XML, JDBC 
Oracle 8i, interdev, COM/DCOM 
and IIS. Requirements: Bach- 
elor's Degree, educational or 
functional equivalent in 
Computer Science or related 
field and two years experience 
as a software engineer or com- 
puter programmer, knowledge of 
ASP, Visio, XML, JOBC, Oracle 
Interdev, COM/DCOM and 
Salary: $66,000/year. 
Working Conditions: 8:00 A.M 
to 5:00 P.M., 40 hours/week 
involves extensive travel and 
frequent relocation Apply 
BECS/ CareerLink, Indiana 
County CareerLink, 300 Indian 
Springs Road, Indiana, PA 
15701, Job No. WEB371718. 


PROGRAMMER ANALYST 
Develop complex finl. web 
pages using vbscript & 
javascript w/ IIS. Develop COM 
components in VB. Program 
data/base objects using SQL 
DMO & SQL Server. Prep. XML 
XSD, DTD specs. Analyze, trou- 
bleshoot & work w/ APL portfolio 
acctg sys. Mobius & fini. asset 
allocation tools incl. Ibbotson 
wealth forecaster, sec. classifier 
& mean variance optimizer. Req 
B.S. in Eng. & 2 yrs. exp. incl 
prior exp. in finl. serv. or invest- 
ment _indust 40-hr. wk 
Job/interview Site: LA, CA. E- 
mail resume to Net Asset 
Management, job ref#101 
resumesforejobs@netasset- 
mgmt.com 


Computerworld + November 17, 2003 


Software Engineer 


(Siebel Implementation) 


This position is responsible for leading the full life cycle 
development, implementation and customization of applications 
using Siebel eConsumer Goods, to include performing all 
Siebel Administrator and assignment manager duties. Candidate 
will setup and configure Siebel for development; test and 
production environments, as well as direct repository and 
physical schema upgrades; repository management; remote 
administration and deployment using Packager and Siebel 
Anywhere. Supporting the business specific process for Trade 
Program management is an essential function of this position 
In addition, you will configure Siebel application using Siebe! 
tools and provide expertise in designing and developing 
workflow based on business rules. Must be familiar with 
Oracle and Visual Basic in order to maintain and develop 
sales and support related software. Must troubleshoot and 
support Siebel server and client and respond to support 


calls from users 


We are looking for a dynamic individual with a minimum of 
1 years’ experience in the job as described and a BS in 
Electrical or Electronics Engineering, Computer Science or 


related field 


To apply, send resume and 
salary history to the following 
address: 1500 Valley Road, 
Wayne, NJ 07470. C/O Tim 
McConville 


SYSTEMS ENGINEER to 
administer and figure Linux 
environment using OpenOffice 
Evolution, Mozilla, StarOffice 
ftp, ssh, telnet, rpm, NFS 
SNMP, TCP and standard UNIX 
tools; Design, implement, mair 
tain and support LAN/WAN net- 
works under 
NT/2000/XP/2003 Si 
Novell, UNIX and Linux (Su 
an Red Hat) operating systems 
in a client/server environment 
Administer network critical 
servers including WINS, DNS 
DHCP, printer servers and files 
servers; Develop, imp 
and support network s' 
using Public Key Infrastruct 
L2TP, IPSec RADIUS 
Encrypted File System, VPN 
SSL protocol, TLS protocol and 
SGC protocol; Maintain and 
ethernet network u 
protocol; Ensure con’ 
work availability 
Etherpeek to monitor LAN/WAN 
networks. Require: B.S. degree 
Computer cience, an 


closely related fi 

exp in the 

Competitive salary 

Apply by resume to: Dr. ) 

Liu, Herzing C 

Lenox Rd., Ste. 100, Atlanta, GA 
30326; Attn: Job 


Job Description: Name of Job 
Title: Senior Systems Engineer 
Description of Job: Provides 
technical expertise during instal- 
lation, administration of comput- 
er system and products 
Analyzes business requirements 
in order to integrate/modify 
existing systems, software. 
Furnishes technical information 
for end-users, oversees techni 
cal management of accounts. 
advises product management 
and development to assure cus- 
tomer requirements are being 
met. Works with Fortune 500 
and Global 2000 companies 
5,000 + users st have 
expertise in SMS, NETIQ, App 
Mgr., BMC Patrol, Bindview 
Tools, Security Tools, Microsoft 
Operations Mgr., Mission Critical 
Software, Sentry, Windows OS 
platforms, XP, and NT/4-2000 
workstation & server administra- 
tion. "Previous MCSE certifica- 
tions a plus.” Travels 3-4 days 
per week. Education: Bachelors 
Major Fieid of Study :Computer 
Science/Business/or _ related 
Occupation Experience: 5 years 
in systems analysis manage- 
ment Submit Resumes to 
Recruitment CW-SE, 800 
Research Drive, Suite 150 
Woodland Park, CO 80863 





Computer Professionals 


(Multiple Openings) 
Software Engineer/Systems 
Analyst/Database 
Administrator/Network 
Administrator 


Milwaukee, WI 


Must have bachelors degree 
or equivalent and experience 
in some of the following 


Web 


Data Stage 
Objects 


Strategy 


atabases (SQL 
DB2/Sybase 
38/NT 
Exchange), UNIX (Sun 
HP. AIX) 
Runner 


Quic 


Mail y 
wiinfo@iksolutionsinc.com oi 
Human Resource Director! K 
Solutions, inc.1840 N. Farwell 


# 306 Milwaukee, Wi 


testing proc 
tise in 
Network 
Flow Systems, Network 
Manager and Simple Network 
Management Protoc 
ments: Bac 
equivalent in Computer Science 
d field and two years 
lence as a software engi- 
iter programmer. 
naling System 
Network Production 
Flow Systems, Network Variable 
Manager and Simple Network 
Management Protocol. Salary 
$66,000/year. Working Cond 
itions: 8:00 A.M. to 5:00 P.M., 40 
hours/week, involves extensive 
travel and frequent relocation 
Apply Site Administrator, 
Greene County CareerLink, 4 
West High Street, Waynesburg. 
PA 15370-1324, Job No 
WEB371720 





Systems Engineer: needed to 
analyze and implement system 
needs and behaviors of online 
secured systems for highly com- 
plex enterprise segments using 
Enterprise Java (J2EE), C++ 
Oracle and Rational Rose on a 
UNIX platform; provide system 
design and technical solutions to 
integrate heterogeneous net- 
works of distributed legacy 
mainframes with new systems 
using various distributed tech- 
nologies plan deployment 
topologies and develop strate- 
gies to ensure that the informa- 
tion is securely and efficiently 
presented to the intended cus- 
tomers over the web; design and 
implement various application- 
to-application interfaces to 
securely exchange information 
with other business units within 
the organization prepare 
detailed design schedule and 
estimates; code by adhering to 
procedures and standards 
review other team members on 
technical matters. Requires a 
Bachelors degree in Computer 
Science or Computer 
Engineering and either four 
years experience in the job 
offered or four years experience 
in software engineering using 
Rational Rose, J2EE, C++ and 
Oracle on a UNIX platform 
Salary $92,850 per year; 40 
hours per week, 8AM to 5PM. 
Monday to Friday. To apply, sub- 
mit two (2) copies of your 
resume to 


Case #200203253 
Labor Exchange Office 
19 Staniford St, 1st fl 
Boston MA 02114 


Programmer Analyst (IBM 
Mainframe) - Multiple Openings 


Structured systems analysis 
design, development, testing 
quality assurance, implementa- 
tion, integration, maintenance 
support and conversion of large 
volume online transaction pro- 
cessing and batch application 
systems in a multi-hardware. 
multi-software environment over 
centralized database systems 
using relational/ hierarchical/net- 
work database management 
systems, Third Generation 
Languages (3GLs) Fourth 
Generation Languages (4GLs) 
CASE tools and Transaction 
Processing Software. Bach- 
eloi’s Degree (or equivalent) in 
Computer Science-Math/Engin- 
eering/Science/Business- 
Commerce and 1 yr. experience 
in job offered or as Software 
Engineer/ Systems Analyst are 
required. Must have appropriate 
combination of skills as follows: 
1 of Aand 1 of B and 1 of C; of 
1 of Aand 2 of B; or 1 of Aand 2 
of C. A includes DB2, IMS DB 
and IDMS DB; and B includes 
CICS, IMS DC, IDMS DC 
ADS/O, QMF, VSAM and MF- 
Workbench; and C_inciudes 
TELON, IEF, ADW, CSP and 
APS; High mobility preferred 
40 hrs/week, 8 am - 5 pm 
$67,995 - $78,000 per year 
Qualified applicants should con- 
tact or send resume to: Actg. C 
Program Supervisor, Mon Valley 
Regional CareerLink, Donora 
Industrial Park, 570 Galiffa 
Drive, Donora, PA 15033. Refer 
to Job Order # WEB 372255 


information Technology compa- 
ny headquartered in Atlanta, GA 
has position openings for IT pro- 
fessionals with min. 2 yrs. exp. 
using skills sets as follows: (a) 
VBScript, JScript, MATLab 
XML, ATL, Visual InterDev, 
VC++; (b) J2EE technologies 
ATG Dynamo 5.x technologies 
MVC, XML, IDMS, MVS, Solaris 

Unix; (c) Mercator, XEDI 
ECMAP, ECGateway, ECRPT, 
MVS, DB2, IMS DB/DC; (d) 
Arbor/RP, TCL, Minitab MATLab. 
Business Objects, Pro *C, SQR 
etc. Candidates must have B.S 
or equiv. in C/S or Eng’g ( any 
branch). Pse. send resumes to 
SoftPros, Inc., 1 Dunwoody 
Park, Ste 230, Atlanta 
30338. 


ae Vaetor eS 


MAGNA INFOTECH consulting 
company is looking for 
Programmer/Analysts, Software 
Consultants and Software 
Engineers with experience in one 
or more of the following 
ERP/CRM: SAP, Baan 
Peoplesoft, Siebel 

UNIX: C, C++, Shell, AIX, HP- 
UX, Solaris Admin, Networking 
AS/400: RPG/400, COBOL/400. 
CL, BPCS, JD Edwards, Synon 
Mainframe: Cobol, CICS, DB2 
JCL, Natural, Adabas 
WINDOWS: VC++, VB, PB, .NET, 
MFC, OLE/COM, Admin 

REAL TIME: Microprocessor. 
RTOS Programming 

INTERNET: Java, Javascript 
CGI, Perl, WAP, Admin, Active X. 
ASP 

DATABASE: Oracle, Informix, 
Sybase, DB2 Admin Developer 
2000, Designer 2000 

Data Warehousing: Informatica 
Cognos, Business Objects. 
OLAP, SAS 


Sales Manager / Marketing 
Manager: must have at least 2 
years of Sales experience, BA 
degree or foreign equivalent 
degree and basic computer skills. 
Multiple positions exist at various 
sites across the US. Please mail 
your resume to: Recruit. Dept 
Ref. #CW011-03, Magna Infotech 
Ltd., 1 Padanaram Rd., Ste. 208 
Danbury, CT 06811-4833. 


Marketing/Sales Exec. Analyze 
IT market demographics/bus. to 
establish long-term objectives/ 
select target audience; Manage 
projects; Create marketing strat- 
egy for company; Develop 
reports on markets conditions/ 
competition/trends Advise 
mgmtIT professionals on prod- 
uct development/services; Plan 
bus development _budget/ 
ensure its appropriate use/out- 
come; Develop comprehensive 
promotion/advertising plans 
Develop sales/reporting proce- 
dures for inside/field Sales 
Exec.; Develop/produce all cor- 
porate collaterals; Meet exist- 
ing/potential clients across the 
US; Train Sales Exec./recruiters 
for better implementation of 
sales strategies; Negotiate bus. 
contracts. Master's Degree in 
Bus. Admin, Marketing or relat- 
ed or Bachelor & 5 yrs of relat- 
ed progressively responsible 
exp., incl. 2 yrs in IT industry. 35 
Hrs./wk, $89,390/yr. Must have 
proof of legal authority to work in 
the U.S. Send resume to IA 
Workforce Center, 800 7th St 
SE, Cedar Rapids, IA 52406- 
0729. Refer to Job Order IA 
1101804. Employer paid adver- 
tisement 


SEEKING FORMER J.D. 
EDWARDS PERSONNEL 
WITH ONEWORLD 
EXPERIENCE IN THE 


FOLLOWING AREAS: 


* Software Development /Testing 
* Implementations 
+ Pre Sales/Sales 


Knowledgeable personnel need- 
ed to assist on a special litiga- 
tion-related matter. All respons- 
es will be treated confidentially. 
Contact Debbie Tope at 
Freedman Boyd Daniels 
(505)842-9960 

email: drt@fodiaw.com 


Computer 

Selectica Programmer Analyst 
needed to design complex con- 
figuration applications; dvpl 
applications using Selectica 
Model Builder, Ace Server. 
Quoter, Repository & EDT 
Process. Program small to 
medium sized modules using 
Java, XML, XSLT, HTML 
JavaScript & s/ware configura- 
tion mgmt tools, incl. CMVC & 
Lotus Notes. Job in Glendale. 
CA & other sites throughout CA 
Pls send resumes to Envision 
Email 
shannon.barton@envision.com 


Programmer/Analyst needed for 
Software Development, 
Services & BPO firm located in 
Burlington, VT. Job duties 
include: Analyze, design, devel- 
op, code, test and implement 
computer software applica- 
tions/systems for clients located 
along the east coast using Forte 
and Oracle in a Windows envi- 
ronment. Applicant must have 
B.S. degree in Computer 
Science, Business, Mathematics 
or Engineering. Applicant must 
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NEWS 


Interland’s Security 
Problems Persist 


Web host has struggled to address 
outages related to breach since August 





BY JAIKUMAR VIJAYAN 
EB HOSTING 
provider Inter- 
land Inc. is still 
struggling to fix 
what appears to be a wide- 
spread security problem, 
months after its customers 
first informed the company 
about it. 

Some sites hosted by Inter- 
land have been infected with 
malicious code that prevents 
Web pages from loading prop- 
erly and as a result causes 
some sites to become unavail- 
able. In many instances, visi- 
tors to the infected sites have 
been redirected to other mali- 





cious sites, where Trojan hors- 
es have been downloaded onto 
their systems. 

Atlanta-based Interland 
manages over 7,000 servers 
and hosts more than 250,000 
Web sites for predominantly 
small and midsize businesses. 
Company officials last week 
refused to respond to requests 
for comment. But in the past, 
the company’s director of se- 
curity, Jeff Reich, has acknowl- 
edged the problem while 
downplaying its significance, 
saying it has been mostly un- 
der control [QuickLink 41102]. 

However, several users last 
week suggested otherwise. 





“T’ve lost count of the num- 
ber of times my site has gone 
down,” said Kevin Krajewski, 
deputy director of manage- 
ment information systems for 
the city of Rochester Hills, 
Mich. “We’ve been dealing 
with [Interland] since March 
on this issue,” he said, noting 
that the latest incident oc- 


| curred Nov. 12. 


Customer Angst 

So far, the problem doesn’t ap- 
pear to have been resolved, 
said Krajewski, who noted that 
his own investigations have 
revealed that one of the Web 
sites that victims are being 


| redirected to appears to be 


hosted by Interland itself. Kra- 
jewski’s own theory — based 
on his investigation of the 
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I’ve lost count | 

of the number | 
of times my site has | 
gone down. We’ve 
been dealing with 
[Interland] since 
March on this issue. 
KEVIN KRAJEWSKI, DEPUTY 


DIRECTOR OF MIS, CITY OF 
ROCHESTER HILLS. MICH 


for clients. “We are passing all 
relevant details along to Inter- 
land’s security department as 
soon as we spot these hacked 


| sites,” Stewart said. 


Most complaints have failed 


| to yield results, said the New 


York-based owner of a site 


| hosted by Interland who re- 


quested anonymity. “So far, 
I’ve been down for six days 
and [the complaint] has been 
escalated ll times,” the owner 
said. “Clearly there are things 


| going on at Interland that are 


problem and conversations 
with Interland staff — is that 
the problem may be the result 
of an insider attack. 

“We have seen evidence of 
two additional breaches at In- 
terland since the initial com- 
promise” in August, said Joe 
Stewart, a senior security re- 
searcher at LURHQ Corp., a 
managed security services 
provider in Chicago. 

The company, which is not a 
customer of Interland, discov- 
ered the breaches as part of its 
Internet monitoring services 


beyond their scope to handle.” 
Another Web site owner, 

based in Arlington, Va., who 

also requested anonymity, last 


| week moved his site to anoth- 
| er provider because of the 


problems. 
“The servers were going 


| down off and on for most of 
aa aa ; 
last week,” he said. “They said 


something about having to re- 


| build their servers.” At the 
| point when the site became 
| unavailable for more than 24 


hours, the decision was made 


| to move, he said. @ 42834 





Continued from page 1 


Job Agency 


policy-makers find it baffling,” 
said Jeff Drozda, a Republican 
state senator. 

Last month, Drozda filed a 
bill that would ban contractors 
from using foreign workers on 
IT initiatives and other state 
projects. Similar legislation 
has been proposed in other 
states, such as New Jersey and 
Michigan. Drozda said he ex- 
pects the state assembly’s eco- 
nomic development and tech- 
nology committee to hold a 
hearing on the bill in January. 

The committee likely will 
also probe the procurement 
process that the DWD used 
for the contract with Tata, 
Drozda said. “We've spoken to 
several vendors who claim 
this contract was tightly writ- 
ten,” he noted. 

Drozda said that when some 
rivals of Tata asked for more 





information from the DWD 
during the requirements-gath- 
ering phase, “they didn’t re- 
ceive any feedback, as if this 
contract was written with one 
vendor in mind.” 


The Bid Process 


Murphy dismissed those accu- 
sations, pointing to an Octo- 
ber 2002 letter that the state 
sent to 84 companies located 
inside and outside of Indiana 
inviting them to attend a pre- 
bid conference. The contract 
process “followed Indiana 
code and all state laws,” Mur- 
phy said. He added that no In- 
diana-based companies bid on 
the project, although a few 
showed an early interest in 
doing so. 

Tata America, which is also 
known as TCS America and is 
a subsidiary of Mumbai, India- 
based Tata Consultancy Ser- 
vices, has developed a similar 
tax and claims processing sys- 
tem for the state of New Mexi- 





co. The other finalists for the 
Indiana contract were Accen- 
ture Ltd. and Deloitte Consult- 
ing. According to Murphy, 
Tata’s proposal was $8.1 mil- 
lion less than one of the rival 


| bids and $23.3 million lower 


than the other one. 

The project is part of Ener- 
gize Indiana, a 10-year plan 
that was approved by the 
state assembly last year and 
is aimed at creating 200,000 
high-tech jobs in the state. 
Murphy said studies also sug- 
gest that replacing the DWD’s 
existing system could save the 


| state up to $360 million over 


10 years, partly by speeding up 
the processing of unemploy- 
ment claims. 

Tom DeMarco, a consultant 
at Cutter Consortium in Ar- 
lington, Mass., said he was 
sorry to hear that a U.S.-based 
jobs development agency had 
opted to hire a firm that would 
bring in foreign workers to 
meet its systems needs. But 








bringing Indian programmers 
to the U.S. is a better long- 
term approach than moving 
the IT work offshore, DeMar- 
co added. 


the work offshore, but the 
hard work — conferring with 
stakeholders — should be 
done where the stakeholders 
are,” he said. 

Jayanta Banerjee, regional 
manager at Tata’s office in In- 


tell how many of the Tata em- 
ployees who are assigned to 
the DWD project will be 
workers from India with H-1B 
or L-1 visas. Tata plans to sub- 
contract at least 5% of the 
work to Bucher & Christian 
Consulting in Indianapolis 
and Nexor Technologies Inc. 
in Troy, Mich., he noted. 

Tata isn’t obligated to pay 
the U.S. Department of Labor’s 
prevailing wages to L-1 visa 
holders who come from India 
to work on the project, but it 





must pay those amounts to H- 

1B workers under U.S. im- 

migration laws, Murphy said. 
Banerjee said Tata pays the 


| sarne wages to comparably 
“You can only move some of | 
| whether they’re based here 


skilled workers in the U.S. 


permanently or hold L-1 or H- 
1B visas. The company’s 
salaries “meet or exceed in- 


| dustry norms and the Depart- 


ment of Labor’s prevailing 


| wage levels,” he said. 
dianapolis, said it’s too early to | 
| ried that the IT workers Tata 


Drozda also said he’s wor- 


sends to Indianapolis won’t be 
paying federal or state taxes 
on their wages. 

But Murphy dismissed that 
possibility. “Since they’ll be 
living here, I’m assuming 
those taxes will be paid,” he 
said. @ 42838 


ONLINE RESOURCES 


For additional coverage of this topic, visit 
our Outsourcing Knowledge Center: 


QuickLink a2290 
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al-Mart Says So’ 


ET’S GET ONE THING STRAIGHT about this plan by Wal- 
Mart requiring suppliers to put radio frequency identifi- 
cation tags on what they ship to Wal-Mart stores. For the 
100 suppliers that have to start putting RFID tags on every 
case and pallet they send to the world’s largest retailer 
starting in January 2005, this isn’t about supply chains or business 
process re-engineering or, really, about business or IT at all. 
It’s about doing what the 800-pound gorilla wants. 


That’s important to understand, especially 
when industry analysts blithely babble about 
the need for cost sharing on this project be- 
cause it will be so expensive for Wal-Mart’s 
suppliers. If history is any guide, there won’t be 
cost sharing. And there won’t be accommoda- 
tion for multiple standards, or flexibility in the 
deadline, either. 

This is not a negotiation. It’s not a process or 
a discussion or a partnership. It’s a simple reali- 
ty: If you want to do business with Wal-Mart, 
you'll do it Wal-Mart’s way. Otherwise, the 800- 
pound gorilla will find somebody else to do 
business with. 

How do we know this? Because the RFID 
project at Wal-Mart is shaping up to be the spit- 
ting image of a technology rollout that hap- 
pened almost two decades ago. 

Back then it was Sears and Kmart that re- 
quired suppliers to start sending invoices, bills 
of lading and other shipping-related documents 
using electronic data interchange. As the 800- 
pound gorillas of U.S. retailing in the 1980s, 
they could make that demand. And what they 
demanded, they got. 

So starting around 1985, if you wanted your 
products in Sears stores, you spent big bucks on 
EDI. Either that or you stopped being a supplier 
to Sears — which some companies 
did. And they were replaced. And 
nobody at Sears shed a tear. 

There was no cost sharing. There 
were no.negotiations. None of the 
data or IT requirements were creat- 
ed for the benefit of the suppliers. 

In fact, other 800-pound gorillas 
in the 1980s were demanding EDI 
from suppliers too — and no two 
EDI versions were exactly the 





needed two other, different EDI systems. Effi- 
cient? Not for suppliers. The efficiencies of EDI 
were all for the gorillas. 

And you can expect Wal-Mart’s RFID imple- 
mentation to work pretty much the same way. 
Wal-Mart is the toughest cost-cutter in dis- 
count retail, a business segment that operates 
on razor-thin margins anyway. You can expect 
no cost sharing, no IT accommodation, no 
sweetness and light. If you want to stay a Wal- 
Mart supplier, you’ll do what the gorilla wants. 

Is that one-sided? Sure. Face it, the business 
case for this IT project consists of three words: 
“Wal-Mart says so.” 

And in IT shops, where the past few years 
have taught us that every IT project must show 
a return on investment or demonstrate im- 
proved efficiency or at least generate a credible 
advantage for your business, this is all wrong. 
There’s no ROI or efficiency or benefit for a 
supplier — just the cost of all those RFID tags 
and the infrastructure to support them. 

Sounds sort of like Y2k all over again, doesn’t 
it? Another no-choice, no-negotiation, no-busi- 
ness-benefit, no-extension-on-the-deadline IT 
project. Except this time it’s dictated by Wal- 
Mart, not a technical glitch. 

You may be able to squeeze some benefit 
out of the situation — say, better 
internal quality tracking using the 
RFID tags or improved warehouse 
efficiency. If your company is a 
Wal-Mart supplier, you should be 
figuring out your options and pre- 
senting them to your top manage- 
ment. They'll want to know how 
they can make the best of an expen- 
sive situation. 

But don’t kid yourself. That 800- 
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How They Get the Big Bucks 
For a thin-client deployment that’s not going well, this 
IT shop brings in some highly paid consultants. One 
of them appears to be taking notes on everything 
that's said or done, using his handheld computer, says 
pilot fish on the project. How do you like that hand- 
held? fish asks during a break. “It’s got some great 
games on it,” consultant says, showing him. Grumbles 
fish, “He'd been playing games the whole day - not a 
oe te 


un aaee 
ree 
cause his 
Sateen 
tant presentation - and 
takes it out on pilot fish, 
who races in to repair it. 


director snarls, “Just fix 
it!” Fish spots the prob- 
jem - the director had 
bumped the monitor’s 
power switch while 
changing floppy disks - 
and turns the monitor 
back on. Problem 
solved? “You made me 


SHARK 
TANK 


we both could 
laugh about - 
even when she 
became my 
boss.” 


: Blame Is Job 1 

? Programmer pilot fish at 
: a big aerospace outfit is 
Ignoring fish’s questions, : 
: quirements for one proj- 
: ect and notices that a 

: critical element has been 
: left out. Without it, the 

; system will be unusable, 
: he tells his boss. Never 
: “We'll give them exactly 
: what they've asked for. 
: We can work on this for 
: six months, and when 

i it doesn’t work, it'll be 

: their fault.” Says fish, “I 
: felt humiliated at having 
that guy as my lead pro- 
i grammer.” 


: This user's hard drive 
: pilot fish can't figure 

i out why. Then the user 
? one cleaner take a huge 
: his pocket and run it all 
: over his keyboard and 
: er brandishes magnet 


looking over user re- 


; proudly and says, “Oh, 


"this is great for picking 


FEED THE SHARKI Send your true tales of IT life to 
sharky@computerworld.com. 


You snag a snazzy 


FRANK HAYES, Computer- 
world’s senior news colum- 
nist, has covered {T for more 
than 20 years, Contact him at 
frank_hayes@computerworld.com. 


pound gorilla doesn’t care whether 

your business benefits from RFID. 
As for that — and for paying the 

tab — you’re on your own. @ 42796 


same. So suppliers that did business 
with Sears needed an EDI system. 
And if they also did business with 
Genera! Motors and Ford, they 


Shark shirt if we use it. And check out the daily feed, browse 
the Sharkives and sign up for Shark Tank home delivery at 
computerworld.com/sharky. 








lronic how it takes the cutting edge 
technology of 2003 to access the 
cutting edge technology of 1973. 


myEXTRA!™ Smart Connectors let you leverage your existing legacy data and logic. 


“Cutting edge” doesn’t cut it. You need products 
that do what they say they will do. This is what 
we say: Our myEXTRA! Smart Connectors give you 
XML-based Web services — they let you get at legacy 
information without changing host applications. 
You can put all of the business data and applica- 
tions locked up in mainframes to new use in hours 
or days, not weeks or months. We've spent the last 
18 years making legacy data more useful. Smart 
Connectors are the logical next step, making data 
easier to get at. 


Find out more. Download our free White Paper 
“Leveraging Legacy Applications to Serve New 
Business Initiatives” at www.attachmate.com/SC7. 
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Hyper-Efficient. 


Hyper-Threading Technology from Intel. 
m Getting more done f can only 
be good for business. And the 
intel’ Pent 1 F 
HT Technol 


once’ — ericy it iT avVS OTT Tast. 


intel.com/go/ht. 


“Look for systems with the Intel® Pentium® 4 Processor with HT Technology logo which your system vendor has verified utilize Hyper-Threading Technology. Performance will vary depending on the specific hardware 
and software you use. See www.intel.com/info/hyperthreading for information. ©2003 Intel Corporation. Intel and the Intel Inside logos plus Pentium are trademarks or registered trademarks of Intel Corporation or 
its subsidiaries in the United States and other countries. All rights reserved. 





